Critical 1Password flaws may allow hackers to snatch your passwords (CVE-2024-42219, CVE-2024-42218)
Critical 1Password flaws may allow hackers to snatch your passwords (CVE-2024-42219, CVE-2024-42218)
Two 1Password vulnerabilities (CVE-2024-42219, CVE-2024-42218) could allow malware to steal secrets stored in the software's vaults.
![Critical 1Password flaws may allow hackers to snatch your passwords (CVE-2024-42219, CVE-2024-42218) - Help Net Security](https://sh.itjust.works/pictrs/image/d3d9415b-31e2-407c-bbaf-881c9cbadb02.jpeg?format=webp&thumbnail=256)
You're viewing a single thread.
And it is MacOS only… so. While yes this is very important - this is a very small target… Mac users who use 1Password
6 9 ReplyDoesn’t sound like it would be that small of a target?
I don’t know what the user distribution is like, but I imagine Mac users are a solid chunk of users for a “premium” password manager like this.
13 0 ReplyPerhaps, I am certain that it is a non zero number. But the majority of Apple users would use keychain (apples built in passwords management) first.
Shrug. Ymmv
1 5 Reply
It works on android too... And web browsers
3 1 ReplyDoes nobody read the article? 1Password works on any platform but the attack is Mac only because it's actually getting passwords from a Mac's keychain through older versions of 1Password.
6 0 Reply