Incorrect Sandbox Restrictions in iOS 13.1.1 and iPadOS 13.1.1 for Third Party App Extensions

CVE-2019-8779 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app extensions may not receive the correct sandbox restrictions.

Learn more about our Cis Benchmark Audit For Apple Ios.