CVE-2024-42219

—

CVSS 3.1

7.8 high

EPSS

<1%p21

Published

Aug 6, 2024 (Aug 6, 2024)

Modified

Jun 17, 2026

Description

1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient.

Vendors: 1password
Products: 1password
Weakness: CWE-1289
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news1 stories

Week in review: Tips for starting your cybersecurity career, Patch Tuesday forecast

Help Net SecurityAug 11, 00:00 UTC · Aug 11, 2024Vulnerability CVE-2024-42219 CVE-2024-42218 CVE-2024-38856+2 CVEs1