Microsoft Researchers Detail macOS Vulnerability That Could Let Attackers Gain User Data

Microsoft has disclosed a vulnerability in macOS that might let an attacker to circumvent the operating system's built-in technology restrictions and get access to users' personal information. The problem, affects the Transparency, Consent, and Control (TCC) system, which has been in place since 2012 to enable users modify privacy settings in their apps.

It might let attackers to take control of an existing program on a Mac machine or install their own app and obtain access to hardware such as the microphone and camera in order to steal user data. The macOS vulnerability might be exploited by circumventing TCC to target users' sensitive data, according to a blog post. The bug was addressed in the macOS Monterey 12.1 update, which was published last month.