Collected research

A View to a Kill: WebView Exploitation

Matthias Neugschwandtner, Martina Lindorfer and Christian Platzer · usenix.org

WebView lets a mobile app expose native functionality and device data to web content it loads, so an attacker who controls that content inherits the app's permissions. The paper sets out the threat scenario, works it through selected apps as case studies, and reports a scan of over 287,000 Android apps for WebView-related vulnerabilities.

Record

Researcher

Matthias Neugschwandtner, Martina Lindorfer and Christian Platzer

Published by

usenix.org

Topic

Other

In the archive

• Collected in the 2013 research round

Tags

• android
• javascript
• sandbox-escape
• privilege-escalation
• large-scale-scan
• measurement-study
• case-study
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Matthias Neugschwandtner, Martina Lindorfer and Christian Platzer, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 17 August 2026.