A dangerous security bug found in as many as 70 percent of android devices could enable malware to hack users’ open browser tabs.

The vulnerability, found in the stock browser of Android releases under 4.4, allows sites controlled by hackers to inject code into other tabs that the user has open. Hackers could potentially access privileged user information including passwords, internet history and keyboard input.