Detected bugs in Android and Google Photos, which led to data leaks. They are already patched, but affected millions of users around the world.
The Android vulnerability was covered in the WebView component and affected all versions of Android from 4.4 and above. WebView allows you to embed web browsing into an Android application and was originally part of Chromium. This means that the vulnerability applies not only to the mobile version of Chrome, but to all Android browsers based on this engine.
Using a vulnerability in WebView, an attacker could gain access to user accounts, browser history and other data.
It turns out that the web version of the Google Photo service revealed user data when attacking via third-party channels. An attacker can get the metadata of the photos, as well as information about where the picture was taken.