A malicious application can dismiss the on‑screen notification that a recording was initiated, allowing a user to remain unaware that audio or video capture is ongoing. This flaw does not provide code execution or system compromise but enables a privacy breach by concealing device activity. The weakness is a classic case of improper access control, identified as CWE-284.

The vulnerability affects multiple Apple operating systems: iOS 18.4 and newer, iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, and watchOS 11.4. For each platform, the issue is resolved by installing the respective security update mentioned above.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1% reflects a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The impact is limited to privacy exposure; the attack vector is likely local, requiring a malicious app to be installed or granted elevated permissions. There is no indication of remote exploitation or additional privilege escalation beyond the ability to suppress the notification.