CVE-2022-29868

First published: Mon May 09 2022(Updated: )

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used for signing in to 1Password.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/author
• agent/references
• agent/last-modified-date
• agent/severity
• agent/weakness
• agent/description
• agent/first-publish-date
• agent/tags
• agent/event
• agent/source
• vendor/1password
• canonical/1password 1password
• version/1password 1password/7.2.4