CVE-2019-6223

Apple iOS and macOS Group Facetime Vulnerability

Apple iOS and macOSOperating systems

CVSS

7.5High

ExploitationExploited in the wildAdded to KEV 3 Nov 2021CISA KEV

Exploit odds (EPSS)2.63%Chance of exploitation activity in the next 30 days, higher than 85% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version yet

Federal deadline3 May 2022Remediation due date for US federal agenciesCISA KEV

CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

No source in this snapshot names a fixed version.

Timeline

5 Mar 2019, 16:00 UTCPublishedCVE List
3 Nov 2021Added to CISA KEVCISA KEV

Description

Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.

Text from CVE List

Affected versions 2

iOSaffected: unspecified before iOS 12.1.3CVE List
macOSaffected: unspecified before macOS Mojave 10.14.3CVE List