1 Password Product Security Update Advisory (CVE-2024-42219)

Overview

1 Password has released an update to address a vulnerability in their product. Users of affected versions are advised to update to the latest version.

 

Affected Products

 

CVE-2024-42219

  • 1Password 8 versions: ~ 8.10.36 (excluded) (Mac)

 

 

Resolved Vulnerabilities

Insufficient validation of communication between XPC processes, which could allow local attackers to steal vault entries (CVE-2024-42219)

 

Vulnerability Patches

The following vulnerability patches are available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2024-42219

  • 1Password 8 version: 8.10.36 (Mac)

 

Referenced Sites

[1] CVE-2024-42219 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-42219

[2] CVE-2024-42219 for 1Password 8 for Mac

https://support.1password.com/kb/202408a/