Apple iOS and macOS Group Facetime Vulnerability

Added to KEV
2021-11-03
Federal due date
2022-05-03
Vendor
Apple
Product
iOS and macOS
EPSS
57.8th percentile (score 0.004, as of 2026-06-08)
NVD CVSS v3.1
Ransomware use
Unknown
Upstream
https://nvd.nist.gov/vuln/detail/CVE-2019-6223

CISA short description

Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.

Required action

Apply updates per vendor instructions.

EPSS percentile is the FIRST.org exploit-probability ranking as of the date noted above; it moves daily. CVSS reflects NVD's analysis at time of publication.