LiveActive security incident?Get immediate response
CVE Record

CVE-2019-6223: A logic issue existed in the handling of Group FaceTime calls.

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.

HighCVSS 7.5Known exploitedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysishigh

Security readout for executives and security teams

Plain-English summary

This Apple FaceTime flaw could let the caller make a recipient’s device answer a Group FaceTime call unexpectedly, creating a privacy exposure. Apple says it was fixed in iOS 12.1.4 and the macOS Mojave 10.14.3 Supplemental Update.

Executive priority

Treat as high priority for any remaining legacy Apple devices. The impact is privacy-focused, and KEV status raises urgency, but modern patched fleets should have low residual exposure.

Technical view

CVE-2019-6223 is a Group FaceTime state-management logic issue affecting Apple iOS and macOS. The CVSS vector indicates network access, low complexity, no privileges, no user interaction, and high confidentiality impact. The provided sources do not define exact affected version ranges beyond the fixed releases.

Likely exposure

Exposure is most likely on Apple iOS or macOS systems that support Group FaceTime and remain below iOS 12.1.4 or macOS Mojave 10.14.3 Supplemental Update. Exact vulnerable version boundaries are not provided in the source bundle.

Exploitation context

CISA KEV inclusion supports treating this as known exploited. The provided bundle does not include exploit timing, prevalence, affected organizations, or technical exploitation detail. Avoid assuming current active campaigns without newer evidence.

Researcher notes

The available record attributes the bug to improper Group FaceTime call state handling. Apple fixed it with improved state management. The bundle lacks detailed affected build ranges, proof-of-concept material, or current exploitation telemetry.

Mitigation direction

  • Update iOS devices to iOS 12.1.4 or later.
  • Apply macOS Mojave 10.14.3 Supplemental Update or later.
  • Prioritize managed devices used by executives and sensitive teams.
  • Check Apple guidance for unsupported or unpatched devices.
  • Track remediation against CISA KEV requirements where applicable.

Validation and detection

  • Inventory Apple iOS and macOS device versions.
  • Confirm patched versions through MDM or asset records.
  • Identify devices with FaceTime capability still below fixed releases.
  • Verify remediation evidence for executive and high-sensitivity users.
  • Review CISA KEV status for organizational tracking.
Prepared
Confidence
high
Sources
5

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2019-6223 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
High
CVSS
7.5 (3.1)
Known Exploited
Yes
Published

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

1CVSS vectors
0Timeline events
0ADP providers
4Source links

CISA KEV status

Status
Known exploited
Source
CISA / ADP
Date added
Not provided

CVSS vector scores

1 official score

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
7.5CVSS 3.1HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N3.93.6Primary CVE score

Vulnerability scoring details

Base CVSS 3.1 score

7.5High
CVSS 3.1 vector shape for CVE-2019-6223Attack VectorAttack ComplexityPrivileges RequiredUser InteractionScopeConfidentiality ImpactIntegrity ImpactAvailability Impact

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Privileges Required
NoneLowHigh
User Interaction
NoneRequired
Scope
ChangedUnchanged
Confidentiality Impact
HighLowNone
Integrity Impact
HighLowNone
Availability Impact
HighLowNone

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
AppleiOSunspecifiedListed
ApplemacOSunspecifiedListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.