Local Credential Exposure in Avira Free Antivirus Software

CVE-2020-12680

What is CVE-2020-12680?

Avira Free Antivirus, specifically versions up to 15.0.2005.1866, presents a vulnerability allowing local users to access sensitive user credentials. The associated executable, Avira.PWM.NativeMessaging.exe, collects credentials stored in web browsers such as Chrome, Firefox, Opera, and Edge without properly verifying the calling program. As a result, requests aimed at fetching Chrome passwords or other stored credentials can be executed, potentially exposing sensitive information to unauthorized local users. Despite some third parties disputing the severity of this issue, it raises significant security concerns for users relying on Avira's antivirus solution.

References