linkedin-extension-fingerprinting

LinkedIn Chrome 확장 프로그램 핑거프린팅 LinkedIn은 모든 페이지 로드 시 2,953개의 Chrome 확장 프로그램을 조용히 탐색합니다. 배경 이 저장소는 LinkedIn이 확인하는 모든 확장 프로그램을 문서화하고 이를 식별하는 도구를 제공합니다. 데이터 이름과 Chrome 웹 스토어 링크가 포함된 확장 프로그램의 전체 목록: chromeextensionswithnamesall.csv Column| Description ---|--- Extension ID| 32자리 Chrome 확장 프로그램 식별자 Name...

crx-scouter

中文文档 crx-scouter.js может незаметно определять, какие расширения Chrome вы используете, и выяснять, является ли человек перед браузером крутым хакером или программистом высокого уровня 🐱. Его можно использовать для ловушек honeypots, идентификации человек-машина, контрмер блокировки рекламы,...

tarnish

tarnish tarnish — это инструмент статического анализа, предназначенный для помощи исследователям в аудите безопасности расширений Chrome. Он автоматизирует большую часть рутинной работы и помогает быстро выявить потенциальные уязвимости безопасности. Этот инструмент сопровождает исследовательскую...

EUVD-2025-26672

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79026

A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker, leveraging social engineering, to potentially execute arbitrary code outside the sandbox. This occurs when a user is convinced to install a specially crafted Chrome extension, leading to...

CVE-2026-91712

A race condition flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521486621...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91712

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91727

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-91712

A race condition in the Extensions component of Google Chrome on macOS (prior to version 153.0.8010.47) allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability impacts Chromium-based browsers , inc...

PT-2026-93166

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition exists within the Extensions component of Google Chrome on Mac. This flaw allows a remote attacker, who has already compromised the renderer process and utilized social...

ROS-20260915-73-0134

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the inclusion of functionality from a unreliable management domain. Exploiting this vulnerability can allow an attacker to cause service interruptions...

PT-2026-93145

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Incorrect reference resolution in Extensions on Mac allows a local attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a local program. T...

ROS-20260915-73-0133

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

ROS-20260915-73-0001

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation through a malicious Chrome Extension...

Astra Linux – Vulnerability in Chromium

In Google Chrome versions prior to 142.0.7444.59, policy bypass in Extensions allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory through a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. Chromium security severity: High...