Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
Apple Group FaceTime Vulnerability in iOS and macOS
Vulnerability
A logic issue in Group FaceTime calls on Apple devices running iOS 12.1.4 or macOS Mojave 10.14.3 may allow the caller to cause the recipient's device to answer the call without user interaction. This vulnerability was addressed with improved state management.
Impact
Exploitation of this vulnerability allows the caller to initiate a Group FaceTime call that is automatically answered by the recipient, bypassing user consent.
Remediation
Users can update to iOS 12.1.4 or macOS Mojave 10.14.3 Supplemental Update to address this vulnerability. Instructions for updating can be found on the Apple Support website.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
