// For flags

CVE-2019-7288

Apple Security Advisory 2019-2-07-1

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

< 1%
*EPSS

Affected Versions

2
*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos .

El problema se abordó con una comprobación del servidor FaceTime mejorada.&#xa0; Este problema se corrigió en Supplemental Update de macOS Mojave versión 10.14.3, iOS versión 12.1.4.&#xa0;Una auditoría de seguridad exhaustiva del servicio FaceTime descubrió un problema con Live Photos

macOS Mojave 10.14.3 Supplemental Update is now available and addresses memory corruption and logic issues.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2019-01-31 CVE Reserved
  • 2019-02-07 CVE Published
  • 2024-08-04 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (2)
URL Tag Source
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions (2)