What’s Vulnerable › Vulnerabilities

CVE-2018-19863

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-12-22 · updated 2026-06-17
• Weakness: CWE-532

Description

An issue was discovered in 1Password 7.2.3.BETA before 7.2.3.BETA-3 on macOS. A mistake in error logging resulted in instances where sensitive data passed from Safari to 1Password could be logged locally on the user's machine. This data could include usernames and passwords that a user manually entered into Safari.

Affected products

• Agilebits 1Password: 7.2.3-beta0, 7.2.3-beta1, 7.2.3-beta2

References

• https://app-updates.agilebits.com/product_history/OPM7#v70203009
• https://discussions.agilebits.com/discussion/99429/the-security-content-of=-betas-7-2-3-beta-3-and-7-2-3-beta-4/p1?new=3D1
• https://support.1password.com/kb/201812/
• https://app-updates.agilebits.com/product_history/OPM7#v70203009
• https://discussions.agilebits.com/discussion/99429/the-security-content-of=-betas-7-2-3-beta-3-and-7-2-3-beta-4/p1?new=3D1
• https://support.1password.com/kb/201812/

Get alerted when CVE-2018-19863 or the next vulnerability affects your stack