> The bug is a local privilege escalation vulnerability that allows for a full compromise of a vulnerable device. If the exploit is delivered via the web, it only needs to be paired with a renderer exploit, as this vulnerability is accessible through the sandbox.
> It works on Pixel 1 and 2, but not Pixel 3 and 3a.
The actual issue:
> The exploit requires little or no per-device customization.