CVE-2011-3072: Google Chrome

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows.

Affected products

• Google Chrome: before 18.0.1025.151 (fixed in 18.0.1025.151)

Published 2012-04-05. Last modified 2026-06-16.