CVE-2024-42219

CVSS 3.1: 7.8 high
EPSS: <1%p21
Published: Aug 6, 2024 · Aug 6, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-42219 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient.

Vendors: 1password

Products: 1password

Weakness: CWE-1289

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

1 story

Week in review: Tips for starting your cybersecurity career, Patch Tuesday forecast

Help Net SecurityAug 11, 00:00 UTC · Aug 11, 2024VulnerabilityCVE-2024-42219 CVE-2024-42218 CVE-2024-38856+23 · 1 read