New vulnerabilities discovered allow access to user data and complete takeover