I did some experiments, and as it seems, server-sent events do work on current versions of Chrome, Firefox and Safari out of the box with CORS :-).
I did not test Opera, and I did not test Internet Explorer (which, according to CanIUse) is not capable of server-sent events.