Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Google and Microsoft have pulled ModHeader , a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history collector built into its official store version. The collector was dormant. An empty allow-list kept it...

EUVD-2024-19721

Malicious code in bioql PyPI...

CVE-2024-22125

Under certain conditions the Microsoft Edge browser extension SAP GUI connector for Microsoft Edge - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality...

gnome-shell and gnome-shell-extensions security update

gnome-shell 40.10-21 - Only open portal login in response to user action Resolves: RHEL-39098 40.10-20 - Fix inhibit-shortcut permissions Resolves: RHEL-2031 40.10-19 - Use correct bus name for screencast service Related: RHEL-35775 gnome-shell-extensions 40.7-19 - Extend workspace buttons to...

CVE-2024-22125

Under certain conditions the Microsoft Edge browser extension SAP GUI connector for Microsoft Edge - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality...

CVE-2024-22125 Information Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)

Under certain conditions the Microsoft Edge browser extension SAP GUI connector for Microsoft Edge - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality...

extensions unauthorized access

The vulnerability of Google Chrome and Microsoft Edge browser extensions is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by downloading a specially created extension...

extensions Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browser extensions is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

QR Code Generator Extension Data Compromise

The vulnerability of the QR Code Generator browser extensions for Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Extensions Component Unauthorized Access

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

CVE-2022-0815: Exposure of Resource to Wrong Sphere

Improper access control vulnerability in McAfee WebAdvisor Chrome and Edge browser extensions up to 8.1.0.1895 allows a remote attacker to gain access to McAfee WebAdvisor settings and other details about the user’s system. This could lead to unexpected behaviors including; settings being changed...

PT-2022-2271

Name of the Vulnerable Software and Affected Versions McAfee WebAdvisor versions up to 8.1.0.1895 Description The issue is related to improper access control in the McAfee WebAdvisor Chrome and Edge browser extensions. This could allow a remote attacker to gain access to McAfee WebAdvisor setting...