CVE-2025-0451, meanwhile, is “only” a medium-rated vulnerability and impacts the Extensions API.

Chrome’s security features are simple, but as of late, they’ve been improving at a faster rate. Google wants you to know it, too—the most current version of its What’s New page highlights two improvements that aren’t strictly fresh,

When the user agrees to the sync, they unwittingly send all their local browser data, such as saved passwords, browsing history, and autofill information, to the hacker's managed profile. The hacker can then sign into this managed profile on their own device and access all that sensitive information.

Google announced that the Chrome Sync feature will be discontinued in early 2025 for Chrome versions older than four years.

ValleyRAT threat employs Google Chrome drive-by download attack strategy. SOPA Images/LightRocket via . Google security has been in the news this week for all the righ