Preliminary research
Trusted by NVIDIA, Amazon and Banks, This Extension Let Any Website Run Code on Your PC
AI-collected research leads through 1 October 2026, including a bounded September review of selected social and community sources. Unranked, incomplete, not community-vetted, and subject to change.
A Chrome extension exposed its native Windows helper to messages from any web page. An attacker could use path traversal in the helper's PKCS#11 library path to make LoadLibrary execute a local DLL, turning a visit to an arbitrary site into code execution on the user's machine.
Record
- Researcher
- James Arnott
- Published by
- Am I Being Pwned?
- Date
- Topic
- Browser
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of James Arnott, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .