Skip to content
ThreatCluster

Critical Flaws in Chrome Extensions Expose Millions to Browser Compromise

First seen 19 Jun 2026, 16:22 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 20, 2026 at 15:52 UTC
  • •Critical vulnerabilities in SiderAI and MaxAI extensions affect over 10 million users.
  • •Attackers can fully compromise browser sessions using the 'Spyder' and 'MaXSS' exploits.
  • •Users of Chrome and Chromium-based browsers are urged to take immediate action.

Security researchers at Rebora Security have identified critical vulnerabilities in popular Chrome extensions SiderAI and MaxAI, affecting millions of users. The vulnerabilities, named 'Spyder' and 'MaXSS', allow attackers to fully compromise browser sessions, potentially accessing sensitive data. These extensions, which have over 10 million installations, are designed to assist users with AI-powered features. The flaws pose a significant risk as they transform these tools into vectors for malicious exploitation. Users of Chrome and other Chromium-based browsers are particularly at risk. Immediate action is recommended to mitigate potential threats. The vulnerabilities have been disclosed as part of ongoing security research efforts.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 94d ago How this analysis works

Timeline

2026-06-19
Critical vulnerabilities disclosed
Rebora Security announced critical flaws in SiderAI and MaxAI extensions, affecting millions of users.
Cybersecuritynews
2026-06-19
Vulnerabilities named
The vulnerabilities were named 'Spyder' and 'MaXSS', highlighting their potential for exploitation.
Gbhackers

More articles in this cluster (2)

Extracted Entities (3)

1 / 2