CVE-2025-0451, meanwhile, is “only” a medium-rated vulnerability and impacts the Extensions API.
When the user agrees to the sync, they unwittingly send all their local browser data, such as saved passwords, browsing ...
Fake Chrome sites spread ValleyRAT via DLL hijacking, targeting finance and sales with keylogging and remote execution.