What is CVE-2022-22676?

CVE-2022-22676 is a medium-severity vulnerability in Apple macOS. CVSS score: 5.5/10. Published 2022-05-26.

How severe is CVE-2022-22676?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Apple macOS

CVE-2022-22676

An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission.

EPSS: 0.007 (49.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

Apple Macos — versions unspecified

References

product-security@apple.com (x_refsource_MISC, Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2022-22676?: CVE-2022-22676 is a medium-severity vulnerability in Apple macOS. CVSS score: 5.5/10. Published 2022-05-26.
How severe is CVE-2022-22676?: Medium severity. CVSS v3 base score is 5.5 out of 10.