Launchpad.net

CVE 2011-3072

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows.

See the CVE page on Mitre.org for more details.