Launchpad.net

CVE 2011-3887

Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass intended access restrictions and read cookies via unspecified vectors.

See the CVE page on Mitre.org for more details.