7.5 High Exploited

CVE-2019-6223 Apple iOS and macOS Group Facetime Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Not observed so far

Description

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.

Affected products and versions

Product	Affected versions	Fixed in
iOS	Versions not published
macOS	Versions not published

References

support.apple.com support.apple.com
support.apple.com support.apple.com

Timeline

Published March 5, 2019
Added to the KEV catalogue November 3, 2021
Last modified December 20, 2025

The 507 CVEs of iOS →

CVE-2024-44229 An information leakage was addressed with additional validation 5.3 Medium CVE-2024-44218 This issue was addressed with improved checks 7.8 High CVE-2024-40867 A custom URL scheme handling issue was addressed with improved input validation 8.8 High CVE-2024-44259 This issue was addressed through improved state management 8.8 High

Track this CVE