Quote:A security vulnerability in Google’s Chromium allows hackers to reach personal data stored on Android devices.
 
Discovered by Positive Technologies researcher Sergey Toshin in December, the vulnerability was reported to Google in January, with a patch already available for Android users.
 
Google, however, has barely mentioned the flaw in the release notes of its January update, explaining that it resolved a high-severity vulnerability documented in CVE-2019-5765 and described as an insufficient policy enforcement in the browser.
 
But according to Positive Technologies, because the WebView component is the one affected by the flaw, any Android release since version 4.4 is exposed to hackers. And obviously, since Chromium is the engine that’s being impacted, it’s not just Google Chrome the browser that could allow hackers to break into Android devices, but all the other applications using the same engine.