Apple TCC Permission Vulnerability Allowing Access to Sensitive User Data

A permissions vulnerability in the TCC (Transparency, Consent, and Control) framework was identified, allowing apps to access sensitive user data without proper authorization. This issue affects multiple Apple platforms, including iOS 17, iPadOS 17, and macOS Sonoma 14. The vulnerability arises from inadequate permissions checks, which could enable unauthorized data access.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user data, such as location information or private calendar details, depending on the specific context in which the vulnerability is exploited.