{
  "cveId": "CVE-2022-26773",
  "url": "https://patchblox.com/security/cve/CVE-2022-26773",
  "summary": "CVE-2022-26773 is fixed in iTunes on 1 platform by iTunes 12.12.4.1 (version 12.12.4.1), released May 24, 2022. It is not reported as exploited. Patch Radar priority: High.",
  "title": "iTunes: Improper Authorization",
  "description": "A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission.",
  "published": "2022-05-26T20:15:10Z",
  "severity": "",
  "cvss": 7.1,
  "cwe": "CWE-285: Improper Authorization",
  "epss": 0.00584,
  "epssPercentile": 0.48146,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2022-26773",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "iTunes",
      "fixedVersion": "12.12.4.1",
      "fix": "iTunes 12.12.4.1",
      "url": "https://patchblox.com/security/fix/windows-app/apple.itunes-12.12.4.1",
      "released": "2022-05-24T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}