A reported new bug within Android’s native Browser app could potentially leak cookies, passwords and other saved data if accessed by a malicious code.
However, this bug, discovered by researcher Rafay Baloch, actually breaks through the SOP within the browser, which would allow the floodgates to open.
The biggest worry for internet search giant Google, the company behind the Android operating system, is that about 50pc of Android’s userbase uses the Browser app.
Browser has been created with open source modifying in mind for manufacturers, as opposed to Google’s own Chrome app.
Since Android 4.2, Browser has not been available on phones with Chrome appearing as the pre-installed browser, despite some users actively searching out and installing Browser onto the phone as preference over Chrome.
While Baloch has reported the fault to Google, the company had initially rejected the claim, only to reverse its decision, claiming it has the ability to fix the problem.
However, as Browser is not an app available through the Google Play Store, the only updates it can receive are through operating system upgrades which, for the most part, are not available to Android users below Jelly Bean 4.2.