CVE-2025-0451, meanwhile, is “only” a medium-rated vulnerability and impacts the Extensions API.
When the user agrees to the sync, they unwittingly send all their local browser data, such as saved passwords, browsing ...