CVE-2022-29868

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass

published May 9, 2022

CVSS
—
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used for signing in to 1Password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2022-05-09T18:34Z
EPSS history
Timeline
  • 09 MAY 18:34Z
    1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass
    cvelistv5