New macOS TCC Bypass Vulnerability Allow Attackers to Access Sensitive User Data

Cybersecuritynews •Abinaya • January 6, 2026

A critical security vulnerability in macOS has been discovered that enables attackers to completely bypass Transparency, Consent, and Control (TCC) protections. Apple’s primary defense mechanism for preventing unauthorized access to sensitive user data is the use of the microphone, camera, and documents. The vulnerability, tracked as CVE-2025-43530, exploits a flaw in the VoiceOver screen reader framework […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

macOS TCC Bypass Vulnerability CVE-2025-43530 Exposed A critical vulnerability in macOS, tracked as CVE-2025-43530, has been identified, allowing attackers to bypass the Transparency, Consent, and Control (TCC) protections. This flaw affects the VoiceOver screen reader framework, enabling unauthorized access to sensitive user data, including microphone and camera functionalities. 3 sources 30

Extracted Entities

New macOS TCC Bypass Vulnerability Allow Attackers to Access Sensitive User Data

The full story

Extracted Entities

CVEs (1)

Platforms (2)

Vulnerabilities (1)