New macOS TCC Bypass Vulnerability Allows Attackers to Access Sensitive User Data

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

macOS TCC Bypass Vulnerability CVE-2025-43530 Exposed A critical vulnerability in macOS, tracked as CVE-2025-43530, has been identified, allowing attackers to bypass the Transparency, Consent, and Control (TCC) protections. This flaw affects the VoiceOver screen reader framework, enabling unauthorized access to sensitive user data, including microphone and camera functionalities. 3 sources 30