CVE-2022-22676: Medium severity macos vulnerability
An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission.
Other sources
PackageKit. An event handler validation issue in the XPC Services API was addressed by removing the service.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-22676.
What is the title of this vulnerability?
The title of this vulnerability is 'PackageKit. An event handler validation issue in the XPC Services API was addressed by removing the …'.
What is the severity of CVE-2022-22676?
The severity of CVE-2022-22676 is medium with a severity value of 5.5.
Which versions of macOS Monterey are affected by this vulnerability?
Versions up to but excluding 12.2 of macOS Monterey are affected by this vulnerability.
How is the vulnerability in macOS Monterey 12.2 fixed?
The vulnerability in macOS Monterey 12.2 is fixed by addressing the event handler validation issue in the XPC Services API.
How can an application delete files for which it does not have permission in macOS Monterey?
An application can delete files for which it does not have permission in macOS Monterey by exploiting this vulnerability.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at 'https://support.apple.com/en-us/HT213054'.