A serious vulnerability has been discovered in the Web browser installed by default on a large number of Android devices, researchers have warned.