Browsec VPN - Free VPN for Chrome

Extensions with the management permission can manage your installed apps, extensions, and themes. If the extension is force-installed, it can disable other extensions.

Access to network traffic

Extensions with the scripting permission can inject and execute code in web pages, which can potentially be used for data exfiltration or session hijacking (requires host permissions, available since Manifest V3).

Extensions with the browsingData permission can remove browsing data from a user's local profile, which could result in forensics / logging issues.

Extensions with the declarativeNetRequest permission can block network requests without requiring host permissions, and redirect requests and modify headers if it has host permissions.

Extensions with the privacy permission can manage browser features that may affect user privacy and safety, for example turn off phishing protection (safeBrowsingEnabled).

Extensions with the proxy permission can configure how the user's internet traffic is routed, which can be exploited for data theft, man-in-the-middle (MITM) attacks, phishing, and bypassing network security measures.

Extensions with the tabs permission can query the url, pendingUrl, title, and favIconUrl of any tab.

Extensions with the alarms permission can schedule code to run periodically or at a specified time in the future.

Extensions with the storage permission can store and retrieve user data, which can persist even after clearing the cache and browsing history.

Enables browser extensions to handle HTTP authentication requests and provide authentication credentials automatically

Extensions with the background permission can force the browser run invisibly as soon as the user logs in to the computer, and keep the browser running after the last window is closed (until the user explicitly quits).