CVE-2011-2819: Apple iPhone OS

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI.

Affected products

• Apple iPhone OS: before 5.0 (fixed in 5.0)
• Apple Safari: before 5.1.1 (fixed in 5.1.1)
• Google Chrome: before 13.0.782.107 (fixed in 13.0.782.107)

Published 2011-08-03. Last modified 2026-06-16.