CVE-2019-6223
High 7.5 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Apple iOS and macOS Group Facetime Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.
Metrics
- CVSS 3.1
-
7.5 (HIGH)
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 3% (percentile: 86) as of 1 November 2026
Affected products
apple: iphone os; apple: mac os x
References
- https://support.apple.com/HT209520 Release NotesVendor Advisory
- https://support.apple.com/HT209521 Release NotesVendor Advisory
- https://support.apple.com/HT209520 Release NotesVendor Advisory
- https://support.apple.com/HT209521 Release NotesVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019… US Government Resource