CVE-2024-42218

1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms...

AgileBits 1Password IPC Protection Bypass (CVE-2024-42219) (macOS)

The version of AgileBits 1Password installed on the remote macOS or Mac OS X host is prior to 8.10.36. It is, therefore, affected by an inter-process communication bypass vulnerability that allows local attackers to exfiltrate vault items. Note that Nessus has not tested for this issue but has...

CVE-2024-42219

1Password for macOS (AgileBits) is affected: versions prior to 8.10.36 are vulnerable to an inter-process communication bypass due to insufficient XPC IPC validation, enabling local attackers to exfiltrate vault items. Remediation: update to 8.10.36 or later. Affected product/version details and ...