CVE-2020-3838

high

Description

The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.

References

https://support.apple.com/kb/HT212327

https://support.apple.com/kb/HT212326

https://support.apple.com/HT210921

https://support.apple.com/HT210920

https://support.apple.com/HT210919

https://support.apple.com/HT210918

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25103

http://seclists.org/fulldisclosure/2021/Apr/51

Details

Source: Mitre, NVD

Published: 2020-02-27

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H