Security · 1h ago
Chrome extension flaw exposes WhatsApp chats
Researchers discovered a universal XSS vulnerability in a popular Adobe Acrobat Chrome extension. The flaw allows attackers to access private data, including WhatsApp chats, from any website. The extension has over 1 million users, making it a high-value target for exploitation.
Meridian48 take
This highlights the overlooked risk of browser extensions, which often have broad permissions that can be abused to bypass same-origin policies.
Read the full reporting
A malicious Chrome extension for Adobe Acrobat could let hackers access private WhatsApp chats →
TechRadar
chrome-extensionxss-vulnerability