 Furthermore, this violates Google Play policies that forbid Google Play apps from downloading any executable code from any sources outside of Google Play.Researchers contacted both UCWeb Inc. and Google prior to the disclosure, but as of March 26, 2019, neither app was patched and users are still vulnerable to the attack.According to tests on Qualys, a cloud security firm, and High-Tech Bridge, an internet security firm, UC Browser contains Logjam, FREAK, and POODLE vulnerabilities.