CVE-2022-29868: Cleartext Storage of Sensitive Information

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used f...

PT-2022-19889

Name of the Vulnerable Software and Affected Versions 1Password for Mac versions 7.2.4 through 7.9.x before 7.9.3 Description The issue allows malicious software running on the same computer to bypass process validation and exfiltrate secrets from 1Password, including vault items and derived valu...

CVE-2021-41795

The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass. By targeting a vulnerable component of this extension, a malicious web page could read a subset of 1Password vault items that would normally be fillable by the user on...

Authorization

The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass. By targeting a vulnerable component of this extension, a malicious web page could read a subset of 1Password vault items that would normally be fillable by the user on...

CVE-2021-41795

The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass. By targeting a vulnerable component of this extension, a malicious web page could read a subset of 1Password vault items that would normally be fillable by the user on...

PT-2021-23408

Name of the Vulnerable Software and Affected Versions 1Password for Mac versions 7.7.0 through 7.8.x before 7.8.7 Description The Safari app extension bundled with 1Password for Mac is vulnerable to authorization bypass. A malicious web page could read a subset of 1Password vault items, including...

CVE-2021-41795: Undefined Security Weakness

The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass. By targeting a vulnerable component of this extension, a malicious web page could read a subset of 1Password vault items that would normally be fillable by the user on...