Security researcher Tavis Ormandy from Googles Project Zero reported a security finding related to the LastPass browser extensions. In the last 24 hours, weve released an update which we believe fixes the reported vulnerability in all browsers and have verified this with Tavis himself. Most users should be updated automatically, but the latest versions can always be downloaded at https://www.lastpass.com/ The vulnerability was caused by the way LastPass behaves in isolated worlds and Trusted Pages.”]
Source: https://blog.lastpass.com/2017/03/security-update-for-the-lastpass-extension/