Browse CVEs

HIGH 7.8 CVE-2024-42219 1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insuffici… 1password 8.10.36+ Fix from $1,9502024-08-06 MEDIUM 5.5 CVE-2022-29868 1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can … 1password 7.9.3+ Fix from $1,6002022-05-09 MEDIUM 6.5 CVE-2021-41795 The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass. By targeting a vulner… 1password 7.8.7+ Fix from $1,6002021-09-29 HIGH 7.8 CVE-2020-18173 A DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute arbitrary code. 1password No fix yet Fix from $1,9502021-07-26 MEDIUM 5.4 CVE-2021-36758 1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens that can be used to per… Connect 1.2+ Fix from $1,6002021-07-16 MEDIUM 6.5 CVE-2021-26905 1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key. Scim Bridge 1.6.2+ Fix from $1,6002021-02-08 CRITICAL 9.8 CVE-2020-10256 An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the 1Password SCIM bridge prior to… Command Line Interface 0.5.5 / 0.7.3+ Fix from $2,3002020-10-27 MEDIUM 5.5 CVE-2014-3753 AgileBits 1Password through 1.0.9.340 allows security feature bypass 1password after 1.0.9.340 Fix from $1,6002020-01-09 MEDIUM 5.9 CVE-2018-13042EPSS 8% The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com.agilebits.onepassword.fillin… 1password No fix yet Fix from $1,6002018-10-05