tarnish

tarnish tarnish هي أداة تحليل ثابتة لمساعدة الباحثين في مراجعات أمان إضافات Chrome. تؤتمت الكثير من العمل الروتيني وتساعدك في التعرف بسرعة على الثغرات الأمنية المحتملة. تصاحب هذه الأداة مقالة المدونة البحثية التي يمكن العثور عليها هنا. إذا كنت لا ترغب في عناء إعداد هذا، يمكنك ببساطة استخدام الأدا...

linkedin-extension-fingerprinting

بصمة إضافات كروم على لينكد إن لينكد إن تفحص بصمت 2,953 إضافة كروم في كل تحميل صفحة. خلفية هذا المستودع يوثق كل إضافة تفحصها لينكد إن ويوفر أدوات لتحديدها. البيانات القائمة الكاملة للإضافات مع الأسماء وروابط متجر كروم: chromeextensionswithnamesall.csv العمود| الوصف ---|--- معرف الإضافة| معرّف إضاف...

crx-scouter

中文文档 crx-scouter.js يمكنه كشف إضافات كروم التي نستخدمها بهدوء، ويمكنه أيضًا كشف ما إذا كان الشخص الذي أمام المتصفح مبرمجًا رائعًا أو مبرمجًا متقدمًا 🐱. يمكن استخدامه في أغراض مثل مصائد العسل honeypots، التمييز بين الإنسان والآلة، مواجهة حظر الإعلانات، الفحوصات المسبقة لاستغلال الإضافات، وغير ذلك...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

EUVD-2025-26672

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79026

A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker, leveraging social engineering, to potentially execute arbitrary code outside the sandbox. This occurs when a user is convinced to install a specially crafted Chrome extension, leading to...

Astra Linux – Vulnerability in Chromium

Before version 151.0.7922.137, using the “After Free” feature in Google Chrome extensions allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code within a sandbox through a crafted Chrome extension. Chromium security severity: High...

CVE-2026-91712

A race condition flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521486621...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91712

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91727

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-91712

A race condition in the Extensions component of Google Chrome on macOS (prior to version 153.0.8010.47) allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability impacts Chromium-based browsers , inc...

PT-2026-93145

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Incorrect reference resolution in Extensions on Mac allows a local attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a local program. T...

PT-2026-93166

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition exists within the Extensions component of Google Chrome on Mac. This flaw allows a remote attacker, who has already compromised the renderer process and utilized social...

ROS-20260915-73-0134

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the inclusion of functionality from a unreliable management domain. Exploiting this vulnerability can allow an attacker to cause service interruptions...

ROS-20260915-73-0133

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

ROS-20260915-73-0001

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...