This vulnerability involves an authorization issue in Apple iOS and iPadOS that could enable a malicious application to bypass Privacy preferences, potentially circumventing user privacy controls. The issue was resolved through improved state management in the specified fixed versions of iOS, iPadOS, and macOS. No CVSS score is provided, and no known exploits in the wild have been reported.

A malicious application could bypass Privacy preferences, potentially gaining unauthorized access to protected user data or capabilities controlled by these preferences. The exact impact depends on the specific privacy settings bypassed but generally undermines user privacy controls.

Apply the official fixes by updating to iOS 18.7.10 or later, iPadOS 18.7.10 or later, iOS 27 or later, iPadOS 27 or later, macOS Golden Gate 27 or later, macOS Sequoia 15.7.8 or later, or macOS Sonoma 14.8.8 or later. These updates address the authorization issue with improved state management.