Universal Code Execution Browser Vulnerability Puts Millions at Risk

**Browser extension messaging chain enables universal code execution:** The report describes a novel technique where a malicious webpage leverages permissive content-script postMessage handlers and extension background scripts that forward messages to native applications (via sendNativeMessage) to bypass Same Origin Policy and browser sandboxes, enabling cookie theft and arbitrary code execution — demonstrated against a widely used PKI smart-card extension.