CVE-2026-12068

Katalog CVE

CVSS 7.4 · High EPSS 0,26%

Kerentanan Incorrect Resource Transfer Between Spheres. Skor CVSS 3.1 7.4 (High) menurut nortonlifelock.com.

Deskripsi (NVD)

Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may allow a remote attacker operating a cross-origin iframe to obtain credentials autofilled for the parent web page via incorrect autofill field selection. This issue affects Avira Password Manager when used with Mozilla Firefox on Windows, macOS, and Linux.

Rincian

Terbit di NVD

12 Juni 2026

Terakhir diubah

23 Juli 2026

Status NVD

Deferred

CVSS 3.1

7.4 (High), sumber nortonlifelock.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-669: Incorrect Resource Transfer Between Spheres

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,7% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.gendigital.com/us/en/contact-us/security-advisories/