Chrome users Beware: Trend Micro Anti-virus has a security vulnerability in the browser extension
Google Chrome is definitely the most popular browser in the world, which also makes it more vulnerable when hackers try to compromise it. In order to limit malicious activities, there are many antivirus and security application developers making extensions for the browser, but one company has been found, and thanks to its recent vulnerability, it is putting millions of users at risk. So what is the name of the Google Chrome extension?
The Trend Micro Password Manager. It is hard to believe that an extension that protects the user's sensitive credentials would have a vulnerability issue, but even the most secure platforms often have a weak point that can be found relatively easily. With the latest vulnerability, an attacker can execute arbitrary code remotely and all that is needed to achieve it is a specially crafted JavaScript.
However, if you try to search for Password Manager in the Chrome Web Store, you won’t be able to find it by accident. This is because it is delivered during the installation of Windows antivirus software or as a standalone application. If you accidentally or intentionally put it in your Google Chrome, your browser could potentially expose 70 of its APIs to the World Wide Web. Fortunately, the vulnerability was not effectively or actively exploitable and the original issue has been fully patched, at least according to reports.
Unfortunately, another report says that it's quite easy to bypass the security extension, and something as small as a PDF containing a Trojan could easily do the trick. Unfortunately, Trend wasn't the only company Google discovered. Engineers are now finishing up a similar issue at AVG on their TuneUp extension, and we have to commend these workers for going out of their way to seal a vulnerability before a hacker discovers it.
