Apple

TCC Bypass Vulnerability Exposes Sensitive iCloud Data on iOS and macOS

Jamf Threat Labs has uncovered a TCC bypass vulnerability that could have allowed malicious apps to access sensitive user data without triggering any notifications or prompting for consent on iOS and macOS devices.
By Blip Tech 1 min read

Jamf Threat Labs recently discovered a significant vulnerability in Apple's iOS Transparency, Consent, and Control (TCC) subsystem on iOS and macOS that could allow malicious apps to access sensitive user data completely unnoticed without triggering any notifications or user consent prompts. The vulnerability, tracked as CVE-2024-44131, impacts the Files.app and FileProvider.framework system processes and exposes users' private information such as photos, GPS location, contacts, and health data. It may also allow potentially malicious apps access to a user's microphone and camera. This exploit can occur completely undetected.

#Apple

Latest News

About Blip Tech

Blip Tech is your go-to source for fast, reliable technology news. We cover everything from the latest Apple and Google announcements to breakthroughs in artificial intelligence, new smartphone releases, computer hardware, and everyday tech tips and how-tos. Our mission is to keep you informed without the fluff — just the news you need, delivered clearly and concisely.