The flaw was discovered by Vlad Stolyarov and Bahare Sabouri of Google's Threat Analysis Group ... full description of each vulnerability and the systems it affects, you can view the full report here.