CVE-2019-6223

7.5 highKEVEPSS 2.6%

High (7.5) in Apple iOS and macOS. In CISA KEV since 2021-11-03. EPSS 2.6% chance of exploitation in the next 30 days.

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2021-11-03, due 2022-05-03
Published: 2019-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os
apple:mac_os_x

References

https://support.apple.com/HT209520
https://support.apple.com/HT209521
https://support.apple.com/HT209520
https://support.apple.com/HT209521
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-6223

Check your stack JSON