CVE-2022-45062: Debian Linux

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.

Affected products

• Debian Debian Linux: version 11.0 only
• Fedoraproject Fedora: version 37 only
• Xfce XFCE4-Settings: before 4.16.4 (fixed in 4.16.4); version 4.17.0 only

Published 2022-11-09. Last modified 2026-06-17.