What are the MOST Critical Web Vulnerabilities in 2019?

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts browser-stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill, history) from Chromium-based and Firefox browsers on Windows by using techniques including headless Chromium spawning, Early Bird APC DLL injection, IElevator COM interface decryption of App-Bound Encryption keys, DPAPI extraction, and NSS decryption; the report covers usage, evasion features, attack scenarios, detection points, and mitigations.