By abusing Java objects exposed to JavaScript, malicious web pages can execute arbitrary commands on Chrome for Android, if the accessibility setting of the device is enabled. Version 18.0.1025308 was released to address this vulnerability.
95e692ac40350a557feb45c1ae2225015502f27f4e789618b992e21f7de06b96