CVE-2022-29868

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used for signing in to 1Password.

• CWE-312

• https://support.1password.com/kb/202204/Vendor Advisory
• https://support.1password.com/kb/202204/Vendor Advisory

Published

May 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2986Enabling and disabling installed H5P libraries did not inclu…8.8
• CVE-2022-29862An infinite loop in OPC UA .NET Standard Stack 1.04.368 allo…7.5
• CVE-2022-29863OPC UA .NET Standard Stack 1.04.368 allows remote attacker t…7.5
• CVE-2022-29864OPC UA .NET Standard Stack 1.04.368 allows a remote attacker…7.5
• CVE-2022-29865OPC UA .NET Standard Stack allows a remote attacker to bypas…7.5
• CVE-2022-29866OPC UA .NET Standard Stack 1.04.368 allows a remote attacker…7.5
• CVE-2022-29869cifs-utils through 6.14, with verbose logging, can cause an …5.3
• CVE-2022-2987The Ldap WP Login / Active Directory Integration WordPress p…7.5
• CVE-2022-29870Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-29871Improper access control in the Intel(R) CSME software instal…7.8
• CVE-2022-29872A vulnerability has been identified in SICAM T (All versions…8.8
• CVE-2022-29873A vulnerability has been identified in SICAM T (All versions…9.8