Critical Chrome Extension Vulnerabilities Let Attackers Easily Compromise Browsers

Gbhackers •Divya • June 19, 2026

A critical security flaws in widely used Chrome extensions, exposing millions of users to the risk of full browser compromise. The vulnerabilities, named “MaXSS” and “Spyder,” affect popular AI-powered extensions SiderAI and MaxAI, which together have more than 10 million installations across Chrome and other Chromium-based browsers. These issues transform these convenience-oriented AI helpers into […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Flaws in Chrome Extensions Expose Millions to Browser Compromise Security researchers at Rebora Security have identified critical vulnerabilities in popular Chrome extensions SiderAI and MaxAI, affecting millions of users. The vulnerabilities, named 'Spyder' and 'MaXSS', allow attackers to fully compromise browser sessions, potentially accessing sensitive data. These extensions, which have over 10 million installations, are designed to assist users with AI-powered features. The flaws pose a significant risk as they transform these tools into vectors for malicious exploitation. Users of Chrome and other Chromium-based browsers are particularly at risk. Immediate action is recommended to mitigate potential threats. The vulnerabilities have been disclosed as part of ongoing security research efforts. 2 sources 68

Extracted Entities

Critical Chrome Extension Vulnerabilities Let Attackers Easily Compromise Browsers

The full story

Extracted Entities

Platforms (1)

Tools (1)

Vulnerabilities (1)