The 2014 Pwnie Nominee For Best Client-Side Bug

Heartbleed (CVE-2014-0160)

Credit: Neel Mehta and Codenomicon

The Heartbleed vulnerability was primarily a server flaw, but it also affected SSL clients, many of which will probably never be patched.’

(CVE-2014-0160)