CVE-2020-9771 is a TCC bypass vulnerability in macOS Catalina that allows malware to access protected data without user consent. AmnesiaStealer exploits this flaw to steal Safari cookies on macOS Catalina, and the technique also works on macOS 26 when the malware possesses Full Disk Access.