Chromium: CVE-2025-8581 Inappropriate implementation in Extensions

Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-8576 Use after free in Extensions

Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-3070 Insufficient validation of untrusted input in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Extensions Component Bypass Substitution

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and replace the user interface...

Extensions Component UI Replacement

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

Extensions Component Information Disclosure

The vulnerability of the Extensions component of Microsoft Edge and Google Chrome lies in the improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information remotely...

Extensions API Unauthorized Access

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome relates to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pa...

Extensions API Installation

The vulnerability of the Extensions API for Google Chrome and Microsoft Edge is related to insufficient data validation. Exploiting this vulnerability could allow an attacker to install any desired extension by using a specially created HTML page...

Google Chrome and Microsoft DoS

The vulnerability of browser extensions in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure by loading a specially created extension...

Extensions API Security Bypass

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

Extensions API Disclosure Termination

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause the program to terminate abnormally...

Extensions Component Unauthorized Access

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause a...

Microsoft Edge Google Chrome Extension Code Execution

The vulnerability of the Extensions component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure through a specially created malicious web page...

Over a Dozen Chrome Extensions Caught Hijacking Google Search Results for Millions

New details have emerged about a vast network of rogue extensions for Chrome and Edge browsers that were found to hijack clicks to links in search results pages to arbitrary URLs, including phishing sites and ads. Collectively called "CacheFlow" by Avast, the 28 extensions in question — including...