NativeMessaging enables host-to-browser cross-boundary attacks
Non-privileged malicious native apps misuse the NativeMessaging API to intercept sensitive data or launch confused deputy attacks against browser extensions with over 532 million cumulative downloads.