Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

iPhone OS iOS 12.2 may let website use mic silently

CVE-2019-6222 · published 6 years ago
Summary

On iPhone OS versions before iOS 12.2 a web page could record audio without showing the microphone icon, potentially exposing private conversations. This happens because the operating system did not correctly track microphone usage in some cases. Updating devices to iOS 12.2 or later resolves the issue.

What to do
  • Update apple iphone_os to version 12.2 or later.
Affected software
VendorProductAffected versions
apple iphone_os < 12.2
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Original advisory text
A consistency issue was addressed with improved state handling. This issue is fixed in iOS 12.2. A website may be able to access the microphone without the microphone use indicator being shown.
A consistency issue was addressed with improved state handling. This issue is fixed in iOS 12.2. A website may be able to access the microphone without the microphone use indicator being shown.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.3 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published18 Dec 2019
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-6222 · NVD
Track software like this
Free during beta