Saved passwords in browser

Is this a bad security vulnerbility? Is it relatively easy for malware to extract this info from your browser?

Bump for being an interesting topic that I'd like to know more about as well.

it can be i know you can definitely get the passwords if you have physical access  to the computer and im guessing if your in a cloud network it would be the same story since you can treat the network like being physically there

I use the roboform password keeper on firefox. When I need a password from it I have to enter the master password.

I'm not sure how secure that is, but my password is about 14 characters long consisting of varying character-type.

/probably old news