XSS in Apple Ipad2

CVE-2012-2899

Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors involving the document.write method.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (53.3th percentile) — read the EPSS interpretation.