CVE-2022-42956

CVE-2022-42956 describes a critical vulnerability in the PassWork extension 5.0.9 for Chrome and other browsers, allowing an attacker to retrieve the cleartext master password. With a CVSS score of 7.5 (High), this vulnerability has a network attack vector and low attack complexity, potentially leading to a complete compromise of confidentiality. While no active exploitation, public exploit code, or significant community discussion has been observed, the direct exposure of the master password presents a severe risk. Organizations using the affected PassWork extension should prioritize remediation to prevent unauthorized access to sensitive credentials.