linkedin-extension-fingerprinting

LinkedIn Chrome 확장 프로그램 핑거프린팅 LinkedIn은 모든 페이지 로드 시 2,953개의 Chrome 확장 프로그램을 조용히 탐색합니다. 배경 이 저장소는 LinkedIn이 확인하는 모든 확장 프로그램을 문서화하고 이를 식별하는 도구를 제공합니다. 데이터 이름과 Chrome 웹 스토어 링크가 포함된 확장 프로그램의 전체 목록: chromeextensionswithnamesall.csv Column| Description ---|--- Extension ID| 32자리 Chrome 확장 프로그램 식별자 Name...

crx-scouter

中文文档 crx-scouter.js 는 사용자가 조용히 사용 중인 Chrome 확장 프로그램을 감지할 수 있으며, 브라우저 앞에 있는 사람이 멋진 해커인지 고급 프로그래머인지 탐지할 수 있습니다 🐱. 허니팟, 인간-기계 식별, 광고 차단 대응, 확장 프로그램 익스플로잇 사전 점검 등에 사용할 수 있습니다. crx-scouter.js의 원리는 2017년에 evi1m0과 함께 진행한 실험에 기반합니다. Google은 이 문제를 해결하려는 듯하지만, 큰 성과는 없었습니다. 자세한 내용은 원리 문서에서 확인할 수 있습니다. 데모:...

tarnish

tarnish tarnish는 Chrome 확장 프로그램의 보안 검토를 지원하는 정적 분석 도구입니다. 일반적인 반복 작업을 자동화하여 잠재적인 보안 취약점을 신속하게 식별할 수 있도록 도와줍니다. 이 도구는 여기에서 확인할 수 있는 연구 블로그 게시물과 함께 제공됩니다. 설정 과정을 거치고 싶지 않다면 https://thehackerblog.com/tarnish/에서 도구를 바로 사용할 수 있습니다. 다듬어지지 않은 공지 및 참고 사항 이것은 다듬어지지 않은 릴리스입니다...

EUVD-2025-26672

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79026

A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker, leveraging social engineering, to potentially execute arbitrary code outside the sandbox. This occurs when a user is convinced to install a specially crafted Chrome extension, leading to...

CVE-2026-91712

A race condition flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521486621...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91712

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91727

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-91712

A race condition in the Extensions component of Google Chrome on macOS (prior to version 153.0.8010.47) allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability impacts Chromium-based browsers , inc...

PT-2026-93166

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition exists within the Extensions component of Google Chrome on Mac. This flaw allows a remote attacker, who has already compromised the renderer process and utilized social...

ROS-20260915-73-0134

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the inclusion of functionality from a unreliable management domain. Exploiting this vulnerability can allow an attacker to cause service interruptions...

PT-2026-93145

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Incorrect reference resolution in Extensions on Mac allows a local attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a local program. T...

ROS-20260915-73-0133

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

ROS-20260915-73-0001

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation through a malicious Chrome Extension...

Astra Linux – Vulnerability in Chromium

In Google Chrome versions prior to 142.0.7444.59, policy bypass in Extensions allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory through a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. Chromium security severity: High...