CVE-2022-29868

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used for signing in to 1Password.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published: May 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-298695.3cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a val CVE-2022-29877.5The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF checks when updating CVE-2022-298717.8Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially ena CVE-2022-298728.8A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests.CVE-2022-298739.8A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET an CVE-2022-298748.8A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with clients but communica CVE-2022-298759.8A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, CVE-2022-298767.1A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request par CVE-2022-298776.5A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.0 CVE-2022-298787.5A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challenges that are sent duri CVE-2022-298794.3A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ CVE-2022-29887.5A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from