VULNERABILITY INTELLIGENCE

CVE-2022-22676

CVSS score5.5 MEDIUM
EPSS probability0.73%
CISA KEVNot currently listed
Published2022-05-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references