Apple · iOS and macOS
CVE-2019-6223
Apple iOS and macOS Group Facetime Vulnerability
What it is
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.
CISA: Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 3, 2022
- Added to the CISA list
- November 3, 2021
- Published
- March 5, 2019
- Severity
- High 7.5 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 2.6% in the top 14.6% of all known vulnerabilities
- More details
- NVD · CVE.org · CISA
All references (2)
More exploited flaws from Apple
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Aug 18, 2022 | Out-of-Bounds Write | iOS and macOS | High 8.8 | 9.9% |
| Aug 18, 2022 | Out-of-Bounds Write | iOS and macOS | High 7.8 | 3.3% |
| Jan 28, 2022 | Memory Corruption | iOS and macOS | Critical 9.8 | 12% |
| Sep 29, 2026 | Out-of-Bounds Write | Multiple Products | High 8.8 | 26% |
| Aug 18, 2026 | Improper Authentication | macOS | Critical 9.8 | 1.7% |
| Mar 20, 2026 | Buffer Overflow | Multiple Products | High 8.8 | 1.7% |
| Mar 20, 2026 | Improper Locking | Multiple Products | High 7.8 | 0.4% |
| Mar 20, 2026 | Classic Buffer Overflow | Multiple Products | Medium 5.5 | 0.4% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.