Google Project Zero-discovered flaw allows remote execution by malicious site if remote access in enabled in the client with no password set. This is not uncomm

Google Project Zero-discovered flaw allows remote execution by malicious site if remote access in enabled in the client with no password set. This is not uncommon since people assume restricting to localhost will prevent access outside the host machine.