Arbitrary Code Execution Vulnerability with System Privileges

Arbitrary Code Execution Vulnerability with System Privileges

CVE-2020-3838 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.

Learn more about our Cis Benchmark Audit For Apple Ios.