CVE-2011-1190: Apple iPhone OS

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."

Affected products

• Apple iPhone OS: before 5.0 (fixed in 5.0)
• Apple Safari: before 5.0.6 (fixed in 5.0.6)
• Google Chrome: before 10.0.648.127 (fixed in 10.0.648.127)

Published 2011-03-11. Last modified 2026-06-16.