CVE-2012-2898: Google Chrome

Medium severity, CVSS 5.0. EPSS: 0.7% chance of exploitation in the next 30 days.

Google Chrome before 21.0.1180.82 on iOS on iPad devices allows remote attackers to spoof the Omnibox URL via vectors involving SSL error messages, a related issue to CVE-2012-0674.

Affected products

• Google Chrome: up to and including 21.0.1180.81; version 21.0.1180.0 only; version 21.0.1180.1 only; version 21.0.1180.2 only; version 21.0.1180.31 only; version 21.0.1180.32 only; …

Published 2014-01-05. Last modified 2026-06-16.