CVE-2011-3067: Apple iPhone OS

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.

Affected products

• Apple iPhone OS: before 6.0 (fixed in 6.0)
• Apple Safari: before 6.0 (fixed in 6.0)
• Google Chrome: before 18.0.1025.151 (fixed in 18.0.1025.151)

Published 2012-04-05. Last modified 2026-06-16.