Actively exploited in the wild
Apple iOS and macOS Group Facetime Vulnerability
Apple - iOS and macOS · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-6223
HighCVSS 7.5KEVSummary
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.
Risk Assessment
An attacker could exploit this vulnerability to force the victim to answer a call, potentially compromising the privacy of the conversation.
Recommendation
Update iOS to version 12.1.4 or later and macOS Mojave to version 10.14.3 or later.
Other vulnerabilities in Apple
Original NVD description (English source)
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.