CVE-2019-6223

high · 7.5Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2021-11-03Remediation due 2022-05-03

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.

7.5

CVSS

2.6%

EPSS (exploit prob.)

85th

EPSS percentile

2019-03-05

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Vendor	Product	Affected versions
apple	iphone_os	< 12.1.4
apple	mac_os_x	< 10.14.3

Check a specific version with /api/v1/cve/match.

References

https://support.apple.com/HT209520
https://support.apple.com/HT209521
https://support.apple.com/HT209520
https://support.apple.com/HT209521
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-6223

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-6223