CVE-2022-29868

—

CVSS 3.1

5.5 medium

EPSS

<1%p5

Published

May 9, 2022 (May 9, 2022)

Modified

Jun 17, 2026

Description

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used for signing in to 1Password.

Vendors: 1password
Products: 1password
Weakness: CWE-312
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.