CVE-2014-8831

CVE-2014-8831 describes a vulnerability in Apple OS X prior to version 10.10.2, where the security_taskgate component allowed a crafted application to read group-ACL-restricted keychain items from other applications. This could be achieved using an app signed with either a self-signed or Developer ID certificate. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and potential for partial confidentiality impact, as an unauthenticated network attacker could exploit it. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.