CVE-2022-22676

5.5 mediumEPSS 0.7%

Medium (5.5) in apple macos. EPSS 0.7% chance of exploitation in the next 30 days.

An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
Published: 2022-05-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:macos

References

https://support.apple.com/en-us/HT213054
https://support.apple.com/en-us/HT213054

Check your stack JSON