{"id":"CVE-2020-3838","aliases":["EUVD-2020-25103","GHSA-xmp4-jqff-7hx8"],"status":"published","title":"The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and...","description":"The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0153,"percentile":0.75082,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2020-02-27T20:45:04Z","modified":"2026-06-17T03:19:07Z","products":[{"vendor":"apple","product":"ios"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"},{"vendor":"cisco","product":"ios"}],"references":[{"url":"https://support.apple.com/HT210919","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT210918","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT210921","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT210920","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT212326","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT212327","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Apr/51","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-3838"},{"url":"https://github.com/advisories/GHSA-xmp4-jqff-7hx8"}],"sources":{"cve":[{"id":"CVE-2020-3838","description":"The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.","status":"published","published":"2020-02-27T20:45:04Z","modified":"2024-08-04T07:44:51.242Z","updated_at":"2026-11-02T14:35:51.923913Z"}],"euvd":[{"id":"EUVD-2020-25103","description":"The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.","status":"published","published":"2020-02-27T20:45:04Z","modified":"2024-08-04T07:44:51Z","updated_at":"2026-11-03T03:08:08.894885Z"}],"ghsa":[{"id":"GHSA-xmp4-jqff-7hx8","title":"The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and...","description":"The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.","status":"published","published":"2022-05-24T17:09:46Z","modified":"2023-01-29T05:01:48Z","cwes":["CWE-276"],"updated_at":"2026-11-02T14:44:54.907829Z"}],"nvd":[{"id":"CVE-2020-3838","description":"The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.","status":"published","published":"2020-02-27T21:15:16.693Z","modified":"2026-06-17T03:19:07.273Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:05:54.796125Z"}]}}