CVE-2021-30713

A macOS TCC permissions bypass vulnerability allowed malicious apps to circumvent privacy controls.

The vulnerability in Apple's macOS Transparency, Consent, and Control (TCC) system permitted malicious applications to bypass user privacy preferences, exposing sensitive data. DIB organizations must ensure endpoint protection and patch management are robust, as this flaw was actively exploited in the wild. The failure highlights the risk of relying on OS-level privacy controls without additional application-layer defenses.

Shame score — A known permissions bypass in a core OS component was actively exploited in the wild, indicating a failure in timely patching and defense-in-depth.