New macOS TCC Bypass Vulnerability Allow Attackers to Access Sensitive User Data

A critical security vulnerability in macOS has been discovered, allowing attackers to bypass Transparency, Consent, and Control (TCC) protections.

Apple's primary defense mechanism for preventing unauthorized access to sensitive user data involves the use of the microphone, camera, and documents. The vulnerability, identified as CVE-2025-43530 , exploits a flaw in the VoiceOver screen reader framework via the com.apple.scrod service.

VoiceOver, Apple's built-in accessibility tool for visually impaired users, operates with special system permissions that provide broad access to user data. Attackers can exploit this service to execute arbitrary AppleScript commands and send AppleEvents to any application, including Finder, thus circumventing TCC security controls.

Field Details

CVE ID CVE-2025-43530

Vulnerability Type TCC Bypass via Private API Exploitation

Affected Component ScreenReader.framework (VoiceOver), com.apple.scrod MIG Service

Attack Vector Local – Dynamic Library (Dylib) Injection or TOCTOU Attack

Impact Complete TCC bypass, arbitrary AppleScript execution, access to sensitive user data

The vulnerability exists in two distinct methods. First, attackers can inject malicious code into Apple-signed system binaries without requiring administrative privileges. The verification logic incorrectly trusts any code signed by Apple, failing to differentiate between legitimate system processes and compromised ones.

Second, a Time-of-Check-Time-of-Use (TOCTOU) attack allows attackers to bypass validation checks by manipulating the application between security verification and execution. These weaknesses, when combined, provide a straightforward path to bypass TCC protections. Once exploited, attackers can access sensitive documents, the microphone, interact with the Finder, and execute arbitrary AppleScript code without user notification or consent.

Apple addressed this vulnerability in macOS 26.2 by implementing a more robust entitlement-based validation system. The patch now requires processes to have the specific "com.apple.private.accessibility.scrod" entitlement and validates this entitlement directly through the client's audit token rather than using file-based verification. This approach eliminates both the injection vulnerability and the TOCTOU window. All macOS users should update to macOS 26.2 or later to protect against this critical TCC bypass vulnerability.

According to reports published on GitHub, a working proof of concept is publicly available, suggesting active exploitation is likely.

Based on reporting by Cyber Security News.