{"history":[{"alert":0,"cve":"CVE-2019-6223","id":21868,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.02629, \"percentile\": 0.85723}"},{"alert":0,"cve":"CVE-2019-6223","id":19485,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.02629, \"percentile\": 0.85637}"},{"alert":0,"cve":"CVE-2019-6223","id":17451,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.02629, \"percentile\": 0.85618}"},{"alert":0,"cve":"CVE-2019-6223","id":15515,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.02629, \"percentile\": 0.8561}"},{"alert":0,"cve":"CVE-2019-6223","id":13493,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.02629, \"percentile\": 0.85599}"},{"alert":0,"cve":"CVE-2019-6223","id":11275,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.02629, \"percentile\": 0.85576}"},{"alert":1,"cve":"CVE-2019-6223","id":10646,"kind":"cna","observed_at":1793960400,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-04T20:16:24.698Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://support.apple.com/HT209521\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://support.apple.com/HT209520\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"NONE\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2019-6223\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-08-19T00:00:00+00:00\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2021-11-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-6223\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"CWE-noinfo Not enough information\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-12-20T04:55:48.072Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-6223\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"iOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"iOS 12.1.3\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"macOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"macOS Mojave 10.14.3\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}], \"datePublic\": \"2019-03-05T00:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"The initiator of a Group FaceTime call may be able to cause the recipient to answer\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2019-03-05T15:57:01.000Z\", \"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\"}, \"references\": [{\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://support.apple.com/HT209521\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://support.apple.com/HT209520\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"product-security@apple.com\", \"ID\": \"CVE-2019-6223\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"iOS\", \"version\": {\"version_data\": [{\"version_affected\": \"<\", \"version_value\": \"iOS 12.1.3\"}]}}, {\"product_name\": \"macOS\", \"version\": {\"version_data\": [{\"version_affected\": \"<\", \"version_value\": \"macOS Mojave 10.14.3\"}]}}]}, \"vendor_name\": \"Apple\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"The initiator of a Group FaceTime call may be able to cause the recipient to answer\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"https://support.apple.com/HT209521\", \"refsource\": \"CONFIRM\", \"url\": \"https://support.apple.com/HT209521\"}, {\"name\": \"https://support.apple.com/HT209520\", \"refsource\": \"CONFIRM\", \"url\": \"https://support.apple.com/HT209520\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"assignerShortName\": \"apple\", \"cveId\": \"CVE-2019-6223\", \"datePublished\": \"2019-03-05T16:00:00.000Z\", \"dateReserved\": \"2019-01-11T00:00:00.000Z\", \"dateUpdated\": \"2025-12-20T04:55:48.072Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2019-6223","id":9021,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.02629, \"percentile\": 0.85565}"},{"alert":0,"cve":"CVE-2019-6223","id":6809,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.02629, \"percentile\": 0.85553}"},{"alert":0,"cve":"CVE-2019-6223","id":4586,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.02629, \"percentile\": 0.85528}"},{"alert":0,"cve":"CVE-2019-6223","id":2368,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.02629, \"percentile\": 0.85508}"},{"alert":1,"cve":"CVE-2019-6223","id":1503,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2019-6223\", \"cwes\": [], \"dateAdded\": \"2021-11-03\", \"dueDate\": \"2022-05-03\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2019-6223\", \"product\": \"iOS and macOS\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.\", \"vendorProject\": \"Apple\", \"vulnerabilityName\": \"Apple iOS and macOS Group Facetime Vulnerability\"}"}],"record":{"affected":[{"product":"iOS","vendor":"Apple","versions":[{"lessThan":"iOS 12.1.3","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"macOS Mojave 10.14.3","status":"affected","version":"unspecified","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-04T20:16:24.698Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.apple.com/HT209521"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.apple.com/HT209520"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}},{"other":{"content":{"id":"CVE-2019-6223","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-08-19T00:00:00+00:00","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2021-11-03","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-6223"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"description":"CWE-noinfo Not enough information","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-12-20T04:55:48.072Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-6223"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"iOS","vendor":"Apple","versions":[{"lessThan":"iOS 12.1.3","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"macOS Mojave 10.14.3","status":"affected","version":"unspecified","versionType":"custom"}]}],"datePublic":"2019-03-05T00:00:00.000Z","descriptions":[{"lang":"en","value":"A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer."}],"problemTypes":[{"descriptions":[{"description":"The initiator of a Group FaceTime call may be able to cause the recipient to answer","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2019-03-05T15:57:01.000Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://support.apple.com/HT209521"},{"tags":["x_refsource_CONFIRM"],"url":"https://support.apple.com/HT209520"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@apple.com","ID":"CVE-2019-6223","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"iOS","version":{"version_data":[{"version_affected":"<","version_value":"iOS 12.1.3"}]}},{"product_name":"macOS","version":{"version_data":[{"version_affected":"<","version_value":"macOS Mojave 10.14.3"}]}}]},"vendor_name":"Apple"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"The initiator of a Group FaceTime call may be able to cause the recipient to answer"}]}]},"references":{"reference_data":[{"name":"https://support.apple.com/HT209521","refsource":"CONFIRM","url":"https://support.apple.com/HT209521"},{"name":"https://support.apple.com/HT209520","refsource":"CONFIRM","url":"https://support.apple.com/HT209520"}]}}}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2019-6223","datePublished":"2019-03-05T16:00:00.000Z","dateReserved":"2019-01-11T00:00:00.000Z","dateUpdated":"2025-12-20T04:55:48.072Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1793960400,"cve":"CVE-2019-6223","description":"A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.","epss":{"date":"2026-11-12","epss":0.02629,"percentile":0.85723},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2019-6223","cwes":[],"dateAdded":"2021-11-03","dueDate":"2022-05-03","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-6223","product":"iOS and macOS","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.","vendorProject":"Apple","vulnerabilityName":"Apple iOS and macOS Group Facetime Vulnerability"},"kev_checked":1794522003,"products":"Apple iOS, Apple macOS","references":["https://support.apple.com/HT209521","https://support.apple.com/HT209520","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-6223"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Apple iOS and macOS Group Facetime Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}