CVE-2018-12572: Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local us...

Security readout for executives and security teams

Older Avast Free Antivirus builds could leave a user's Avast credentials in application memory after login. A local user or malware already on the computer could recover sensitive credentials from that process memory. The sources do not describe remote exploitation or active exploitation. Exposure is most likely on endpoints still running Avast Free Antivirus versions older than 19.1.2360. Risk depends on whether users log into Avast and whether untrusted local users or malware can access the endpoint. Treat this as a targeted endpoint hygiene issue, not an internet-wide emergency. Prioritize remediation where older Avast is installed on shared, unmanaged, or already suspicious machines. Mitigation focus: Upgrade Avast Free Antivirus to 19.1.2360 or later where present.; Check Avast vendor guidance for any current replacement or remediation advice.; Remove unsupported or unmanaged Avast installations from enterprise endpoints..

Prepared

Jun 6, 2026, 21:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.