A\u00a0Qihoo 360 researcher named\u00a0Guang Gong has demonstrated a security weakness in Chrome for Android which could compromise “virtually every version of Android” running the latest browser.<\/p>\n
According to a report by Engadget<\/a><\/strong>, the details of the exploit have not been divulged, but the report stated it leverages\u00a0JavaScript v8 to gain full administrative access to the victim’s phone.<\/p>\n “The impressive thing about Guang’s exploit is that it was one shot; most people these days have to exploit several vulnerabilities to get privileged access and load software without interaction,” said\u00a0Dragos Ruiu, organiser of the\u00a0PacSec conference where\u00a0Gong demonstrated the vulnerability.<\/p>\n “As soon as the phone accessed the website, the JavaScript v8 vulnerability in Chrome was used to install an arbitrary application without any user interaction to demonstrate complete control of the phone.”<\/p>\n Google has been alerted to the bug.<\/p>\n Linux encryption ransomware hacked \u2013\u00a0how to get your files back<\/a><\/strong><\/p>\nMore security news<\/h3>\n