CVE-2013-2881
Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Date published : 2013-07-30
http://googlechromereleases.blogspot.com/2013/07/stable-channel-update_30.html