CVE-2012-2899 | BDVDB-2026-59174 Detail

Description#

Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors involving the document.write method.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12014-01-05Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.