CVE-2012-2899

Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote…

published January 5, 2014

CVSS
—
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors involving the document.write method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00813 · 56.6th percentile
Published
2014-01-05T20:00Z
EPSS history
Timeline
  • 05 JAN 20:00Z
    Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote…
    cvelistv5