CVE-2011-2805: Apple iPhone OS

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks via unspecified vectors.

Affected products

• Apple iPhone OS: before 5.0 (fixed in 5.0)
• Apple Safari: before 5.1.1 (fixed in 5.1.1)
• Google Chrome: before 13.0.782.107 (fixed in 13.0.782.107)

Published 2011-08-03. Last modified 2026-06-16.