[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

McAfee® WebAdvisor

Version 8.1.0.9066 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Rating: 4.6 ★ (15.3K ratings)

Users: 148,000,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: McAfee is a well-established cybersecurity company with a strong reputation in the industry. The extension has an impressive 148 million users and a solid 4.6-star rating from over 15,000 reviews, indicating widespread adoption and general user satisfaction. The extension's purpose as a web security advisor justifies many of its extensive permissions, as it needs broad access to monitor and protect users from malicious websites and downloads.

Concerns: While the permissions are extensive, they align with the extension's security function. The webRequest permission allows real-time threat detection, downloads permission enables scanning of downloaded files, and broad host permissions are necessary for comprehensive web protection. The 'wasm-unsafe-eval' CSP directive is concerning but may be required for advanced threat detection algorithms. The main risk comes from the sheer scope of access this extension has to your browsing data and activities.

Recommendations: Given McAfee's reputation and the extension's legitimate security purpose, the risk is mitigated compared to unknown developers with similar permissions. However, users should ensure they trust McAfee with their browsing data, as this extension can monitor all web activity. Consider whether you need this level of protection versus built-in browser security features. If you have concerns about data privacy, review McAfee's privacy policy carefully. The extension appears to function as intended for a security tool from a reputable company.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

HIGH

Unsafe WebAssembly Execution

This extension's Content Security Policy allows 'wasm-unsafe-eval', which permits potentially dangerous WebAssembly code execution. This could be used to hide malicious code or perform CPU-intensive operations.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

activeTab
alarms
declarativeNetRequest
downloads
nativeMessaging
scripting
storage
tabs
unlimitedStorage
webRequest

Host Permissions:

<all_urls>

Content Security Policy:

extension_pages: script-src 'self' 'wasm-unsafe-eval'; worker-src 'self' 'wasm-unsafe-eval'; default-src 'self'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com; img-src data:; connect-src 'self' https://publicsuffix.org https://data.iana.org/ https://sadownload.mcafee.com https://mip.api.mcafeewebadvisor.com https://us.search.yahoo.com https://cu1pehnswadext.servicebus.windows.net https://threat.api.mcafee.com https://csptoken.ccs.mcafee.com https://analytics.qa.apis.mcafee.com https://analytics.apis.mcafee.com https://report.api.mcafee.com/ https://auth.api.mcafee.com/auth/v1/jwt ws://127.0.0.1:* https://einstein-core.awscommon.mcafee.com https://securitymgmt.unifiedapis.mcafee.com https://securitymgmt.qa.unifiedapis.mcafee.com https://securitymgmt.staging.unifiedapis.mcafee.com https://einstein-qa-core.awscommon.mcafee.com https://einstein-stg-core.awscommon.mcafee.com

Embedded URLs (321 total):

https://www.mcafee.com/consumer/nl-nl/policy/legal.html	https://www.youtube.com
https://youtube.com	https://chromewebstore.google.com/detail
https://microsoftedge.microsoft.com/addons/detail	https://www.siteadvisor.com
http://www.w3.org/1998/Math/MathML	http://www.w3.org/2000/svg
http://www.w3.org/1999/xhtml	https://publicsuffix.org/list/public_suffix_list.dat
https://data.iana.org/TLD/tlds-alpha-by-domain.txt	https://search.yahoo.com/th_notice_dss
https://mip.api.mcafeewebadvisor.com/v1/typosquatting?	https://sadownload.mcafee.com/products/SA/Win/extensions/engines/update.json
https://sadownload.mcafee.com/products/SA/Win/extensions/sailor/condition.json	https://sadownload.mcafee.com/products/SA/Win/extensions/antitracker/all_trackers.json
https://threat.api.mcafee.com/	https://sadownload.mcafee.com/products/SA/Win/extensions/waextension/condition.json
https://sadownload.mcafee.com/products/SA/Win/extensions/waextension/featureflag	https://securitymgmt.unifiedapis.mcafee.com
https://securitymgmt.qa.unifiedapis.mcafee.com	https://securitymgmt.staging.unifiedapis.mcafee.com
https://einstein-core.awscommon.mcafee.com	https://einstein-qa-core.awscommon.mcafee.com
https://einstein-stg-core.awscommon.mcafee.com	https://www.mcafee.com/consumer/v/wa-how.html
https://csptoken.ccs.mcafee.com/auth/token	https://identity.unifiedapis.mcafee.com/breach/v1/BreachCount
https://protection.mcafee.com	https://mail.google.com
https://outlook.live.com	https://mail.yahoo.com
https://protection.mcafee.com/esd/dashboard	https://sadownload.mcafee.com/products/sa/website/custom/t91849/webadvisorinstaller.exe
https://www.mcafee.com/consumer/v/wa-chrome-how.html	https://www.mcafee.com/consumer/v/wa-firefox-how.html
https://www.mcafee.com/consumer/v/wa-edge-how.html	https://www.mcafee.com/
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	https://www.mcafee.com/en-us/safe-browser/mcafee-webadvisor.html
https://www.mcafee.com/support/s/article/000002207?language=en_US	https://sadownload.mcafee.com/products/SA/Win/extensions/waextension/typosquat.txt
https://sadownload.mcafee.com/products/SA/Win/extensions/waextension/typosquat_version.txt	https://github.com/kurkle/color#readme
https://www.chartjs.org	https://www.mcafee.com/legal?tab=privacy
https://www.mcafee.com/support/?page=shell&shell=contact-support	https://www.mcafee.com/legal
http://www.w3.org/1999/xlink	http://www.bohemiancoding.com/sketch
https://www.facebook.com/McAfee/	https://www.linkedin.com/company/mcafee
https://twitter.com/McAfee	https://mcafee.com/support/
https://www.facebook.com/McAfee	https://www.youtube.com/user/mcafee4consumers
https://www.mcafee.com/en-us/consumer-products.html	https://www.mcafee.com/en-us/antivirus/mcafee-total-protection.html
https://www.mcafee.com/en-us/antivirus/mcafee-livesafe.html	https://www.mcafee.com/consumer/en-us/microsite/identity-protection/overview.html
https://www.mcafee.com/enterprise/en-us/global-contact-us.html	http://careers.mcafee.com/
https://home.mcafee.com/sitemap?culture=en-us	https://www.mcafee.com/consumer/en-us/policy/global/legal.html
https://www.mcafee.com/en-us/consumer-support/help/system-requirement.html	https://x.com/McAfee
https://www.mcafee.com/legal?tab=product	https://clients2.google.com/service/update2/crx
https://fonts.googleapis.com	https://fonts.gstatic.com
https://publicsuffix.org	https://data.iana.org/
https://sadownload.mcafee.com	https://mip.api.mcafeewebadvisor.com
https://us.search.yahoo.com	https://cu1pehnswadext.servicebus.windows.net
https://threat.api.mcafee.com	https://csptoken.ccs.mcafee.com
https://analytics.qa.apis.mcafee.com	https://analytics.apis.mcafee.com

Page 1 of 5

Raw Manifest

{
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrOrksCVomv4HZxXZu6eb3fMbFPlYcSWHnBa0eGSLlBx4YJU3hgqATLB9FrVu1I2kjEKU02kDNejzwnooAjAMpQLMN6rDnVLt/xgvBvwfUcqVOX2vmJvzBFUNhrShiAco662ZtJRD2B4MshsjoggFtWvpBDi3VXRzpr1I0jA0tUwIDAQAB",
  "name": "__MSG_res_PRODUCT_NAME_TRADEMARKED__",
  "icons": {
    "128": "images/webadvisor.png"
  },
  "action": {
    "default_icon": {
      "16": "images/browser_action/disabled_16.png",
      "32": "images/browser_action/disabled_32.png"
    },
    "default_title": "__MSG_res_PRODUCT_NAME_TRADEMARKED__"
  },
  "version": "8.1.0.9066",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_res_PRODUCT_NAME_TRADEMARKED__",
  "permissions": [
    "activeTab",
    "alarms",
    "declarativeNetRequest",
    "downloads",
    "nativeMessaging",
    "scripting",
    "storage",
    "tabs",
    "unlimitedStorage",
    "webRequest"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "scripts/content_navigate_complete.js"
      ],
      "run_at": "document_end",
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "all_frames": true
    }
  ],
  "host_permissions": [
    "<all_urls>"
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "ids": [
      "*"
    ],
    "matches": [
      "https://*.mcafee.com/*"
    ]
  },
  "minimum_chrome_version": "88.0",
  "content_security_policy": {
    "extension_pages": "script-src 'self' 'wasm-unsafe-eval'; worker-src 'self' 'wasm-unsafe-eval'; default-src 'self'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com; img-src data:; connect-src 'self' https://publicsuffix.org https://data.iana.org/ https://sadownload.mcafee.com https://mip.api.mcafeewebadvisor.com https://us.search.yahoo.com https://cu1pehnswadext.servicebus.windows.net https://threat.api.mcafee.com https://csptoken.ccs.mcafee.com https://analytics.qa.apis.mcafee.com https://analytics.apis.mcafee.com https://report.api.mcafee.com/ https://auth.api.mcafee.com/auth/v1/jwt ws://127.0.0.1:* https://einstein-core.awscommon.mcafee.com https://securitymgmt.unifiedapis.mcafee.com https://securitymgmt.qa.unifiedapis.mcafee.com https://securitymgmt.staging.unifiedapis.mcafee.com https://einstein-qa-core.awscommon.mcafee.com https://einstein-stg-core.awscommon.mcafee.com"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "html/*.html",
        "images/*.png",
        "images/*.gif",
        "images/*.svg",
        "json/*.json",
        "fonts/*.ttf",
        "css/*.css",
        "txt/*.txt",
        "MockingBird-Package/scripts/worklet_processor.js",
        "wasm_feature.wasm"
      ],
      "extension_ids": [
        "fheoggkfdfchfphceeifdbepaooicaho"
      ]
    }
  ]
}

by ✦ Astarte

McAfee® WebAdvisor

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (321 total):

Raw Manifest

Detections

Manifest Findings