Product:
macOS
Summary
This issue was addressed through improved state management. Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen. This vulnerability poses a risk to user privacy and security.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-31271 |
Exploitation
An attacker can exploit this vulnerability by sending a FaceTime call to a locked macOS device. If the device is locked, the call can still be accepted, allowing the attacker to potentially gain access to the device’s audio and video feeds without the user’s consent.
Affected Products
- macOS Tahoe: The latest version of macOS that includes the fix for this vulnerability.
Mitigation
To mitigate this issue, users should ensure that their macOS devices are updated to the latest version. Additionally, users can adjust their FaceTime settings to limit incoming calls while the device is locked.