Skip to content
Threat Feed
Subscribe

Tag

Browser-Extension

2 briefs RSS
high advisory

Summarize Extension Mouseover Authenticated Request Vulnerability (CVE-2026-45245)

Summarize versions prior to 0.15.1 contain a vulnerability (CVE-2026-45245) in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events, triggering authenticated daemon requests and potentially exposing sensitive internal endpoints.

Summarize < 0.15.1 cve-2026-45245 browser-extension authenticated-request-forgery mouseover-event
2r 1t 1c
low advisory

Detection of Malicious Browser Extension Installation

This rule identifies the installation of potentially malicious browser extensions, which adversaries can leverage for persistence and unauthorized activity by monitoring file creation events in common browser extension directories on Windows systems.

Elastic Defend +2 persistence browser-extension windows
2r