the title should say "every <i>vulnerable</i> Android device":<p><pre><code> One of the most interesting ones is the addJavascriptInterface vulnerability ( CVE-2012-6636 ) which affects every device running a version older than Android 4.2
</code></pre>
the exploit is from march 2012 and affects devices running android < 4.2. which according to latest platform usage [0] numbers is around 14.9% of all active android devices.<p>[0] <a href="https://en.wikipedia.org/wiki/Android_(operating_system)#Platform_usage" rel="nofollow">https://en.wikipedia.org/wiki/Android_(operating_system)#Pla...</a>
Ugh this type of commoditization of exploits is downright scary. Google needs to do something about the OEMs dragging their feet on updates and do it FAST. I can't see any other solution for people other than to move to Nexus or iOS phone.