CVEvulnerability

CVE-2026-12068

7.4 HIGH Published 2026-06-12 Modified 2026-07-23 Official page ↗
Status
Deferred
Published
2026-06-12
Last modified
2026-07-23
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.4 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Weaknesses
CWE-669

Description

Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may allow a remote attacker operating a cross-origin iframe to obtain credentials autofilled for the parent web page via incorrect autofill field selection. This issue affects Avira Password Manager when used with Mozilla Firefox on Windows, macOS, and Linux.

Related

Weakness · CWE (1)

  • CWE-669 Incorrect Resource Transfer Between Spheres weakness

References