Claude Chrome extension flaw lets malicious extensions trigger AI actions
More on extensions
Other advisories
- MediumCVE-2026-115740Trellix DLP on-prem extensions: Server-Side-Request-Forgery (SSRF)
- MediumCVE-2026-115739Trellix DLP on-prem extensions: hartcodierter kryptografischer Schlüssel
- MediumCVE-2026-115740Trellix DLP on-prem extensions: Server-Side-Request-Forgery (SSRF)
- HighCVE-2026-115738Trellix DLP on-prem extensions: SQL-Injection
- MediumCVE-2026-115739Trellix DLP on-prem extensions: hartcodierter kryptografischer Schlüssel
- HighCVE-2026-115738Trellix DLP on-prem extensions: SQL-Injection
- MediumCVE-2026-105605DJ-Extensions.com DJ-Classifieds extension for Joomla: Umgehung der Autorisierung über nutzergesteuerten Schlüssel
- CriticalCVE-2026-105604DJ-Extensions.com DJ-Classifieds extension for Joomla: SQL-Injection
Other news entries
- Chrome extensions with 13.4 million installs caught hijacking searchesNewsBleepingComputer
- TYPO3 Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- TYPO3 Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery PhrasesNewsThe Hacker News
- The EDR blind spot: 3 ways browser attacks evade endpoint telemetryNewsBleepingComputer
- MediaWiki Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- MediaWiki Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- BragJack attacks hijack AI browser agents through malicious extensionsNewsBleepingComputer
ID