CVE-2019-6223

An unspecified vulnerability in Apple's Group FaceTime allowed call initiators to force recipients' devices to answer calls without user interaction.

This vulnerability bypassed user consent for answering calls, potentially enabling unauthorized access or eavesdropping. DIB organizations must ensure all endpoints are patched and that users are trained to recognize unexpected call behaviors, as this represents a significant bypass of authentication controls.

Shame score — The vulnerability was actively exploited in the wild (KEV) and allowed a bypass of user authentication controls, representing a significant avoidable risk despite Apple's eventual patch.