Chrome Extension Vulnerabilities: Millions at Risk

Rebora Security Research reports critical Chrome extension vulnerabilities affecting SiderAI and MaxAI, with issues tracked as CVE-WATCHTOWER. The defects, named Spyder and MaXSS, let attackers abuse extension content scripts to trigger actions without user interaction, including stealing sensitive data and issuing unauthorized commands. Because these extensions are installed on more than 10,000,000 and 1,000,000+ devices respectively, the flaws significantly increase the risk of large-scale browser compromise.