CVE-2019-7288

—

CVSS 3.1

9.8 critical

EPSS

1%p71

Published

Oct 27, 2020 (Oct 27, 2020)

Modified

Jun 17, 2026

Description

The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos .

Vendors: apple
Products: iphone os, mac os x
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news2 stories

Apple fixes FaceTime eavesdropping bug, two iOS zero-days

Help Net SecurityMay 28, 10:09 UTC · May 28, 2020Exploit / PoC in the wildCVE-2019-6223 CVE-2019-7288 CVE-2019-7286+3 CVEs

Latest iOS 12.1.4 Update Patches 2 Zero

The Hacker NewsFeb 8, 07:50 UTC · Feb 8, 2019Vulnerability in the wildCVE-2019-6223 CVE-2019-7286 CVE-2019-7287+1 CVEs