Description
The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to bypass certain Privacy preferences.
Exploits (1)
nomisec
WORKING POC
4 stars
by KlinKlinKlin · poc
https://github.com/KlinKlinKlin/MSF-screenrecord-on-MacOS
References (4)
Core 4
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213182
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213193
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213183
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213186
Scores
CVSS v3
5.5
EPSS
0.0153
EPSS Percentile
81.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Details
Status
published
Products (5)
apple/ipados
< 15.4
apple/iphone_os
< 15.4
apple/macos
< 12.3
apple/tvos
< 15.4
apple/watchos
< 8.5
Published
Mar 18, 2022
Tracked Since
Feb 18, 2026