A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-calculatorUpgrade accountsservice-libsUpgrade gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk-update-icon-cacheUpgrade LibRaw-develUpgrade gnome-shell-extension-places-menuUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-drive-menuUpgrade gtk3Upgrade gnome-shell-extension-commonUpgrade gnome-shellUpgrade gnome-online-accountsUpgrade gnome-shell-extension-user-themeUpgrade gnome-online-accounts-develUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-jsc-develUpgrade gdmUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-autoarUpgrade vinoUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-software-develUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-updates-dialogUpgrade accountsservice-develUpgrade accountsserviceUpgrade gnome-control-centerUpgrade gnome-sessionUpgrade LibRawUpgrade gnome-softwareUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-top-iconsUpgrade gtk3-immodule-ximUpgrade webkit2gtk3-develUpgrade mutterUpgrade gnome-session-wayland-sessionUpgrade webkit2gtk3Upgrade gnome-shell-extension-native-window-placementUpgrade mutter-develUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-apps-menu | May 4, 2022 | Jul 7, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Jul 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc | Jun 13, 2023 | Jul 7, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 7, 2021 |
| Centos_linux | — | Upgrade gdm-debuginfoUpgrade accountsserviceUpgrade gtk3-immodule-ximUpgrade gnome-session-wayland-sessionUpgrade gnome-control-center-filesystemUpgrade gnome-autoarUpgrade webkit2gtk3-debuginfoUpgrade mutter-debugsourceUpgrade gnome-shell-extension-places-menuUpgrade webkit2gtk3-jsc-debuginfoUpgrade vino-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shellUpgrade gnome-calculatorUpgrade accountsservice-libs-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-sessionUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-apps-menuUpgrade gtk3-immodules-debuginfoUpgrade gnome-online-accounts-develUpgrade LibRawUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-top-iconsUpgrade gtk3Upgrade gnome-control-center-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade vinoUpgrade gnome-shell-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-shell-debugsourceUpgrade LibRaw-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-tests-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade accountsservice-debugsourceUpgrade accountsservice-libsUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-systemMonitorUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk3-develUpgrade webkit2gtk3Upgrade gnome-control-center-debugsourceUpgrade gnome-settings-daemonUpgrade gdm-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-control-centerUpgrade gnome-shell-extension-updates-dialogUpgrade mutterUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-jsc-develUpgrade gnome-calculator-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade vino-debugsourceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-online-accounts-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gdmUpgrade gnome-online-accountsUpgrade gnome-session-debugsourceUpgrade gnome-classic-sessionUpgrade gtk3-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade webkit2gtk3-jscUpgrade mutter-debuginfoUpgrade webkit2gtk3-develUpgrade LibRaw-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-softwareUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-gesture-inhibitor | Nov 10, 2021 | Jul 7, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Jul 30, 2021 | Jul 7, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Feb 2, 2022 | Jul 7, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.32.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jul 7, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-session-xsessionUpgrade mutterUpgrade gnome-control-centerUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-session-kiosk-sessionUpgrade gnome-session-wayland-sessionUpgrade gnome-sessionUpgrade webkit2gtk3Upgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-workspace-indicatorUpgrade LibRawUpgrade gsettings-desktop-schemas-develUpgrade accountsserviceUpgrade webkit2gtk3-develUpgrade mutter-develUpgrade gnome-software-develUpgrade accountsservice-develUpgrade gtk3-immodule-ximUpgrade gnome-softwareUpgrade gnome-online-accountsUpgrade LibRaw-develUpgrade gtk3-develUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-drive-menuUpgrade gdmUpgrade vinoUpgrade gnome-shellUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-user-themeUpgrade gtk3Upgrade accountsservice-libsUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-dash-to-dockUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-commonUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-windowsNavigatorUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-jscUpgrade gnome-online-accounts-develUpgrade gnome-classic-sessionUpgrade gnome-calculatorUpgrade gnome-control-center-filesystemUpgrade gnome-autoarUpgrade gnome-shell-extension-places-menu | Nov 17, 2021 | Jul 28, 2021 |
| Redhat_linux | — | Upgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade accountsservice-libs-debuginfoUpgrade gnome-online-accountsUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-debugsourceUpgrade LibRaw-develUpgrade vinoUpgrade gnome-shell-extension-apps-menuUpgrade gtk3-immodule-ximUpgrade mutter-develUpgrade gnome-shell-extension-native-window-placementUpgrade LibRaw-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade webkit2gtk3-develUpgrade webkitgtk4-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade webkitgtk4-jsc-develUpgrade LibRawUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-debuginfoUpgrade gtk3-develUpgrade mutter-debugsourceUpgrade mutter-tests-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-autoarUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-window-listUpgrade gnome-settings-daemon-debugsourceUpgrade LibRaw-debugsourceUpgrade mutterUpgrade gnome-softwareUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-calculatorUpgrade gnome-software-debugsourceUpgrade gnome-control-centerUpgrade gnome-control-center-debuginfoUpgrade accountsservice-develUpgrade gnome-classic-sessionUpgrade gnome-autoar-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gsettings-desktop-schemasUpgrade webkitgtk4-jscUpgrade gnome-shell-extension-gesture-inhibitorUpgrade webkit2gtk3-jscUpgrade gtk3-debuginfoUpgrade vino-debuginfoUpgrade webkit2gtk3Upgrade gnome-session-debuginfoUpgrade gnome-software-develUpgrade gnome-sessionUpgrade gnome-shell-extension-panel-favoritesUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade accountsservice-debuginfoUpgrade vino-debugsourceUpgrade gtk-update-icon-cacheUpgrade gtk3-devel-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-launch-new-instanceUpgrade webkitgtk4-develUpgrade gdmUpgrade gnome-shellUpgrade gsettings-desktop-schemas-develUpgrade gtk3-immodules-debuginfoUpgrade gdm-debugsourceNo solution existsUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-places-menuUpgrade webkitgtk4Upgrade gnome-shell-extension-windowsNavigatorUpgrade accountsserviceUpgrade mutter-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-desktop-iconsUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gtk3Upgrade gnome-session-wayland-sessionUpgrade gdm-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gnome-control-center-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-commonUpgrade gnome-online-accounts-debugsourceUpgrade gnome-settings-daemonUpgrade LibRaw-samples-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-updates-dialogUpgrade accountsservice-libsUpgrade gnome-shell-extension-window-grouperUpgrade gnome-session-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade webkitgtk4-doc | Nov 10, 2021 | Jul 7, 2021 |
| Rocky_linux | — | Upgrade gnome-online-accounts-debugsourceUpgrade gnome-settings-daemonUpgrade gtk3Upgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-session-xsessionUpgrade LibRaw-debuginfoUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-debugsourceUpgrade gnome-calculatorUpgrade gnome-sessionUpgrade gnome-shell-debuginfoUpgrade gdm-debuginfoUpgrade accountsservice-debugsourceUpgrade mutter-debuginfoUpgrade gnome-session-debugsourceUpgrade LibRaw-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3Upgrade gnome-session-wayland-sessionUpgrade gtk3-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade gtk3-immodule-ximUpgrade vino-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-software-debugsourceUpgrade accountsservice-libsUpgrade accountsserviceUpgrade gtk3-devel-debuginfoUpgrade gnome-control-center-debugsourceUpgrade LibRawUpgrade gnome-session-debuginfoUpgrade webkit2gtk3-jscUpgrade LibRaw-develUpgrade mutter-debugsourceUpgrade gnome-shell-debugsourceUpgrade vinoUpgrade gnome-calculator-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gnome-software-debuginfoUpgrade gdm-debugsourceUpgrade gnome-autoarUpgrade gsettings-desktop-schemasUpgrade accountsservice-libs-debuginfoUpgrade accountsservice-develUpgrade mutter-develUpgrade mutterUpgrade gnome-session-kiosk-sessionUpgrade gnome-autoar-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-develUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-online-accountsUpgrade gdmUpgrade gnome-control-center-debuginfoUpgrade gtk3-develUpgrade gnome-softwareUpgrade webkit2gtk3-jsc-debuginfoUpgrade accountsservice-debuginfoUpgrade vino-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-software-develUpgrade gnome-shellUpgrade gnome-online-accounts-debuginfoUpgrade gnome-control-center | May 5, 2022 | Jul 7, 2021 |
| Suse | — | Upgrade webkit2gtk3-develUpgrade libsoup-develUpgrade webkit2gtk3-minibrowserUpgrade typelib-1_0-javascriptcore-5_0Upgrade typelib-1_0-webkit2-4_1Upgrade webkit2gtk-4-1-langUpgrade typelib-1_0-webkit2webextension-4_1Upgrade libwebkit2gtk-5_0-0Upgrade typelib-1_0-javascriptcore-4_1Upgrade libjavascriptcoregtk-4_0-18Upgrade libsoup-langUpgrade libjavascriptcoregtk-4_1-0Upgrade libjavascriptcoregtk-5_0-0Upgrade webkit2gtk-4_1-injected-bundlesUpgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libwebkit2gtk-4_0-37-32bitUpgrade libwebkit2gtk3-langUpgrade webkit2gtk3-soup2-develUpgrade webkit2gtk-4_0-injected-bundlesUpgrade webkit2gtk-5_0-injected-bundlesUpgrade typelib-1_0-javascriptcore-4_0Upgrade typelib-1_0-Soup-2_4Upgrade libwebkit2gtk-4_1-0Upgrade libsoup-2_4-1Upgrade libwebkit2gtk-4_0-37Upgrade webkit-jsc-4Upgrade webkit2gtk-5-0-langUpgrade typelib-1_0-webkit2-4_0Upgrade typelib-1_0-webkit2webextension-4_0Upgrade typelib-1_0-webkit2-5_0 | Aug 4, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Jul 29, 2021 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub