The most severe security bug can be exploited without user interaction, per Google....