Popular Chrome Ad Blocker Discovered to Have Script Injection Vulnerability

A widely used Chrome extension for ad blocking has been found to possess the capability to inject malicious scripts.

3 min readTechnology

A recent investigation into a well-known ad blocking extension for Chrome, specifically designed for YouTube, has revealed a concerning security flaw. The extension, known as Adblock for YouTube (ID: cmedhionkhpnakcndndgjdbohmhepckk), boasts over 10 million installations and is highlighted with a Featured badge on the Chrome Web Store. This extension claims to help users block advertisements while browsing YouTube, enhancing their viewing experience. However, the analysis conducted by cybersecurity experts at Island has shown that it can execute arbitrary JavaScript code, raising alarms about potential misuse. Such a vulnerability could allow malicious actors to run harmful scripts in the background, compromising user security and privacy. Users are advised to exercise caution and consider alternative ad blockers that prioritize security and transparency. The findings underscore the importance of scrutinizing browser extensions, even those with high download counts and positive reviews, as they can harbor hidden risks.

Technology