Adobe Acrobat: PDF edit, convert, sign tools

Extensions with the cookies permission can retrieve and modify cookies (requires host permissions).

Access to network traffic

Extensions with the scripting permission can inject and execute code in web pages, which can potentially be used for data exfiltration or session hijacking (requires host permissions, available since Manifest V3).

Extensions with the declarativeNetRequest permission can block network requests without requiring host permissions, and redirect requests and modify headers if it has host permissions.

Extensions with the history permission can add, remove, and query for URLs in the browser's history.

Extensions with the tabs permission can query the url, pendingUrl, title, and favIconUrl of any tab.

Extensions with the webNavigation permission can track websites the user visits by listening to navigation events.

Extensions with the alarms permission can schedule code to run periodically or at a specified time in the future.

Extensions with the bookmarks permission can create, organize, and otherwise manipulate bookmarks.

Extensions with the contextMenus permission can add items to the browser's context menu (also known as the right-click menu).

Extensions with the downloads permission can programmatically initiate, monitor, manipulate, and search for downloads. This can be used to download scripts.

Extensions with the nativeMessaging permission can communicate with cooperating applications installed on the user's machine.

Use the offscreen API to create and manage offscreen documents.

Extensions with the sidePanel permission can display content in the browser's side panel alongside the main content of a webpage, enabling a persistent interface that complement the user's browsing journey (available since Manifest V3).

Extensions with the storage permission can store and retrieve user data, which can persist even after clearing the cache and browsing history.