Google’s Android Browser has a flaw that enables malicious sites to inject JavaScript into other sites. This means that potentially any site visited in the browser could be stealing sensitive data. Google has discontinued the AOSP Browser as part of its attempts to gain more control over Android. The bug is likely to be embedded in third-party products, and some Android users have even installed it on their Android 4.4 phones because for one reason or another they prefer it to Chrome. Google’s own numbers paint an even worse picture: only 24.5 percent of Android users are using version 4.1.x or below.”]