TCC Bypass Vulnerability Exposes Sensitive iCloud Data on iOS and macOS

Jamf Threat Labs recently discovered a significant vulnerability in Apple's iOS Transparency, Consent, and Control (TCC) subsystem on iOS and macOS that could allow malicious apps to access sensitive user data completely unnoticed without triggering any notifications or user consent prompts. The vulnerability, tracked as CVE-2024-44131, impacts the Files.app and FileProvider.framework system processes and exposes users' private information such as photos, GPS location, contacts, and health data. It may also allow potentially malicious apps access to a user's microphone and camera. This exploit can occur completely undetected.