LastPass Fixes Serious Security Flaw in Chrome, Firefox Extensions

Password manager LastPass creates a workaround for a serious vulnerability affecting browser extensions in Chrome, Firefox, and Microsoft Edge.

Dark Reading Staff, Dark Reading

March 23, 2017

1 Min Read
Dark Reading logo in a gray background | Dark Reading

Password manager LastPass has fixed a serious vulnerability in its browser extensions for Google Chrome, Mozilla Firefox, and Microsoft Edge. The flaw was discovered by Google's Tavis Ormandy, reports Network World. It could have been exploited to access extensions' internal commands and steal passwords or personal information.

LastPass has put a workaround in place to provide protection from malicious codes and plans to fully fix the flaw in updated versions.

Ormandy later reported another vulnerability in the Firefox extension, which LastPass said was linked to the first. The problem was immediately fixed in a new version of the extension 4.1.36a released the next day.

"No password changes are required of users at this time," say LastPass developers.

Read details on Network World.

About the Author

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights