The Arc browser's feature called "Boosts" allows users to customize website appearances but has raised security concerns due to a critical flaw that enables potential exploitation.
The vulnerability stems from the use of Firebase for sharing customizations, allowing attackers to leverage a user's creatorID to push malicious Boosts to targets.
If an attacker alters their creatorID to match that of a target, they can directly push harmful content when a victim visits a customized site.
The Browser Company responded quickly to the reported potential exploit, releasing a security fix within a day of being notified about the issue.
Collection
[
|
...
]