PatchTheCVE1password vulnerabilities and fixes
Recent CVEs affecting 1password, with upgrade or downgrade steps. 2 tracked.
1password has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-08-06. Highest priority: CVE-2024-42219 (score 33/100).
- CVE-2024-42219 HIGH 7.8 UPGRADE 1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-proces
- CVE-2024-42218 MEDIUM 4.7 UPGRADE 1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-speci
FAQ
How do I fix 1password vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 1password being exploited right now?
None of the tracked 1password CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 1password CVE should I patch first?
CVE-2024-42219 currently ranks highest (33/100): 1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-proces.