In April 2019, Indian security researcher Arif Khan discovered a security vulnerability affecting the Indian and certain global versions of MIUI's native browser application - Mi Browser and Mint Browser, which is also developed by Xiaomi, both of which were based on the same browser engine, which was bypassed more than 2 times subsequently after Xiaomi fixed it. Khan also found a URL Address Bar Spoofing vulnerability affecting only the Indian and certain overseas versions but not the Chinese version. Again in the same month, Khan reportedly found another major lock screen bypass vulnerability affecting only the Indian version of MIUI which was using Glance, which allowed exfiltration of sensitive user data despite MIUI's lock screen protection, which was eventually fixed by Xiaomi after several media reports. These events led to various speculations about the company's motives, and approach concerning the privacy and security of its users in its Indian and overseas markets.