Description
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A maliciously crafted email may be able to initiate FaceTime calls without user authorization.
References (12)
Scores
CVSS v3
5.5
EPSS
0.0002
EPSS Percentile
3.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-552
Status
published
Products (8)
Apple/iOS and iPadOS
< 16.7.8
Apple/iOS and iPadOS
< 17.5
apple/ipados
< 16.7.8
apple/iphone_os
< 16.7.8
Apple/macOS
< 14.5
apple/macos
14.0 - 14.5
apple/watchos
< 10.5
Apple/watchOS
< 10.5
Published
Jun 10, 2024
Tracked Since
Feb 18, 2026