CVE-2019-6223

Katalog CVE

CVSS 7.5 · High KEV · sudah dieksploitasi EPSS 2,6%

Kerentanan pada apple iphone os, apple mac os x. Skor CVSS 3.1 7.5 (High) menurut NVD. Masuk katalog KEV CISA pada 3 November 2021, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.

Rincian

Terbit di NVD

5 Maret 2019

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

2,6% peluang dieksploitasi; lebih tinggi dari 85,1% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Apple iOS and macOS Group Facetime Vulnerability

Masuk KEV

3 November 2021

Tenggat CISA

3 Mei 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/HT209520 release notes · advisory vendor
• https://support.apple.com/HT209521 release notes · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-6223 pemerintah AS