Google Chrome Extensions Subsystem Homology Policy Bypass Vulnerability

Google Chrome is a popular web browser. Google Chrome's Extensions subsystem fails to restrict the use of the Object.defineProperty method to rewrite build-in extension code, which can be exploited by remote attackers to bypass the same-origin policy using specially crafted JavaScript code...

UBUNTU-CVE-2015-6788

The ObjectBackedNativeHandler class in extensions/renderer/objectbackednativehandler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...

Google Chrome Extensions Memory Misreference Vulnerability

Google Chrome is a web browser developed by the American company Google Google. The 'GetLoadTimes' function in the renderer/loadtimesextensionbindings.cc file in the Extensions implementation of Google Chrome prior to version 47.0.2526.73 A memory misreference vulnerability exists. A remote...

Google Changes Policy on Chrome Extensions

Google is rolling out a new policy that will force all Windows and Mac users to install Chrome extensions only from the Chrome Web store. The company last year began enforcing this policy for Windows users on the main, stable channel for Chrome. Google offers several different channels for Chrome...

UBUNTU-CVE-2014-3177

Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176...

Google Bug Bounty Program to Include Chrome Extensions

Google has announced it will retool its bounty program and extend its scope to include Chrome apps and extensions branded as “by Google,” including extensions tied to popular products such as Gmail and Hangouts. According to a post by Google’s Michal Zalewski and Eduardo Vela Nava on the company’...

Google Pulls Adware Extensions from Chrome Store

Two Chrome extensions went from legitimate browsing ad-ons to adware-spewing nuisances in the blink of a legitimate transaction. Google recently took action against the Add to Feedly and Tweet this Page extensions, removing both from the Chrome Store after they were sold to adware brokers and fou...

Adware Companies buying popular Chrome extensions to inject Ads and Malware

Browser extensions are extra features and functionality that you can easily add to Google Chrome, Firefox and other popular Browsers, but they can be used to serve malicious adware, which automatically renders advertisements in order to generate revenue for its author. Hackers are now taking thei...

Google Adds Feature to Keep Malware Out of Chrome Web Store

Google is adding more security controls to its browser-based Chrome Web Store by adding a new application-vetting feature called ‘Enhanced Item Validation.’ For all intents and purposes, the search giant claims that the new policy will only impact application developers in that they will have to...