Google appears to no longer be fixing security flaws in the oldest versions of its smartphone Internet browser.

The previously undisclosed move could leave some users with older phones exposed to snooping by hackers and spies, security researchers said.

The new policy applies to the default browser in Android version 4.3, released in mid-2013...