CVE-2024-42219: High severity 1password vulnerability
Published Aug 6, 2024
·Updated
1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient.
Affected Software
1 affected component
1Password 1password Macos>=8.0<8.10.36
Event History
Aug 6, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Aug 8, 2024
News Published
via The Register·01:45 PM
News Published
via The Register·01:49 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-42219?
The severity of CVE-2024-42219 is classified as medium due to the potential for local attackers to exfiltrate vault items.
2
How do I fix CVE-2024-42219?
To fix CVE-2024-42219, update 1Password 8 to version 8.10.36 or later on macOS.
3
Who is affected by CVE-2024-42219?
CVE-2024-42219 affects users of 1Password 8 for macOS prior to version 8.10.36.
4
What can attackers do with CVE-2024-42219?
Attackers can potentially exfiltrate vault items from 1Password 8 due to insufficient validation in XPC inter-process communication.
5
Is there a workaround for CVE-2024-42219?
The best course of action is to update to a patched version, as there are no documented workarounds for CVE-2024-42219.