Electron: Extension tabs.query returns tab URLs and titles without the tabs permission

Impact chrome.tabs.query returned each tab's url and title to extensions that held neither the tabs permission nor matching host permissions, so any loaded extension could read the URL and title of every webContents in its session. Apps are only affected if they load extensions...

CVE-2013-0925: Undefined Security Weakness

Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs aka APIPermission::kTab permission before providing a URL to this extension, which has unspecified impact and remote attack vectors...

PT-2013-2719

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 26.0.1410.43 Description The issue concerns the handling of permissions for extensions, specifically the tabs permission, also known as APIPermission::kTab. This permission is required for an extension to access...

CVE-2011-1435

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

Code injection

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

CVE-2011-1435

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

CVE-2011-1435

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

CVE-2011-1435

Google Chrome vulnerability CVE-2011-1435 affects Chrome before 11.0.696.57, where the extensions tabs permission can be abused to read local files via a crafted extension. Root cause: improper handling of the tabs permission by extensions. Impact is a read of local files (confidentiality). Remed...

CVE-2011-1435

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

CVE-2011-1435: Incorrect Default Permissions

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...