Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-session-wayland-sessionUpgrade accountsservice-libsUpgrade gnome-calculatorUpgrade gnome-shell-extension-apps-menuUpgrade gtk3Upgrade accountsserviceUpgrade mutterUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-window-grouperUpgrade gtk-update-icon-cacheUpgrade gnome-control-centerUpgrade gtk3-immodule-ximUpgrade gnome-softwareUpgrade gnome-sessionUpgrade LibRawUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-workspace-indicatorUpgrade webkit2gtk3Upgrade gnome-shell-extension-updates-dialogUpgrade gnome-session-xsessionUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-places-menuUpgrade gnome-settings-daemonUpgrade gnome-session-kiosk-sessionUpgrade LibRaw-develUpgrade gdmUpgrade gtk3-develUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-gesture-inhibitorUpgrade accountsservice-develUpgrade gnome-software-develUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shellUpgrade mutter-develUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-window-listUpgrade vinoUpgrade webkit2gtk3-jsc-develUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3-develUpgrade gnome-autoarUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-commonUpgrade gnome-classic-sessionUpgrade gnome-online-accounts | May 4, 2022 | Sep 8, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Sep 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-devel | Jun 13, 2023 | Sep 8, 2021 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Aug 23, 2021 | May 24, 2021 |
| Apple Safari | — | Upgrade to Apple Safari version 14.1.1Uninstall Apple Safari on Windows | May 25, 2021 | May 25, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 8, 2021 |
| Centos_linux | — | Upgrade mutterUpgrade mutter-tests-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade accountsserviceUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-dash-to-dockUpgrade LibRaw-debuginfoUpgrade accountsservice-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gdmUpgrade gtk3-immodule-ximUpgrade gdm-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-softwareUpgrade webkit2gtk3Upgrade webkit2gtk3-develUpgrade gsettings-desktop-schemasUpgrade vino-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-updates-dialogUpgrade gtk3-immodules-debuginfoUpgrade LibRawUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-gesture-inhibitorUpgrade mutter-debuginfoUpgrade gnome-control-centerUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-software-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-places-menuUpgrade gnome-session-wayland-sessionUpgrade mutter-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-window-listUpgrade gdm-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-debugsourceUpgrade gnome-autoar-debugsourceUpgrade gnome-autoarUpgrade gtk-update-icon-cacheUpgrade LibRaw-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade accountsservice-libsUpgrade gnome-calculatorUpgrade gtk3-develUpgrade gnome-online-accounts-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gtk3-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shellUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-online-accountsUpgrade gnome-session-xsessionUpgrade gnome-autoar-debuginfoUpgrade gtk3Upgrade gnome-shell-extension-commonUpgrade gnome-session-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-control-center-filesystemUpgrade vino-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-sessionUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade vinoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-settings-daemon | Nov 10, 2021 | Sep 8, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Jul 30, 2021 | Jul 30, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Feb 2, 2022 | Sep 8, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.32.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Sep 8, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-native-window-placementUpgrade mutter-develUpgrade webkit2gtk3-jscUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-software-develUpgrade LibRaw-develUpgrade gtk-update-icon-cacheUpgrade accountsservice-libsUpgrade gdmUpgrade vinoUpgrade gnome-online-accountsUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-apps-menuUpgrade gnome-online-accounts-develUpgrade gnome-settings-daemonUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-places-menuUpgrade gnome-classic-sessionUpgrade gnome-autoarUpgrade gnome-shellUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-calculatorUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-session-wayland-sessionUpgrade mutterUpgrade gnome-softwareUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-auto-move-windowsUpgrade accountsserviceUpgrade gnome-shell-extension-top-iconsUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-xsessionUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-sessionUpgrade webkit2gtk3Upgrade gtk3-immodule-ximUpgrade LibRawUpgrade webkit2gtk3-jsc-develUpgrade gtk3Upgrade gnome-session-kiosk-sessionUpgrade gnome-control-centerUpgrade accountsservice-develUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-systemMonitor | Nov 17, 2021 | Jul 28, 2021 |
| Redhat_linux | — | Upgrade gnome-shell-extension-windowsNavigatorUpgrade gtk3-immodules-debuginfoUpgrade gnome-session-wayland-sessionUpgrade accountsserviceUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-apps-menuUpgrade gtk3Upgrade webkitgtk4-develUpgrade gnome-settings-daemonUpgrade gdm-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade vino-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade gnome-sessionUpgrade gdmUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-online-accounts-develUpgrade webkitgtk4Upgrade LibRaw-samples-debuginfoUpgrade mutter-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3No solution existsUpgrade gnome-shellUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade mutter-tests-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-calculatorUpgrade gtk3-immodule-ximUpgrade gnome-software-debugsourceUpgrade accountsservice-libsUpgrade gnome-session-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk-update-icon-cacheUpgrade gnome-control-center-debugsourceUpgrade gnome-session-xsessionUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-autoar-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-softwareUpgrade gtk3-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-control-centerUpgrade gnome-shell-extension-disable-screenshieldUpgrade gtk3-immodule-xim-debuginfoUpgrade gsettings-desktop-schemasUpgrade vinoUpgrade webkitgtk4-jsc-develUpgrade vino-debuginfoUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3-jscUpgrade mutter-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade webkitgtk4-jscUpgrade gnome-calculator-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-native-window-placementUpgrade accountsservice-libs-debuginfoUpgrade gdm-debugsourceUpgrade gnome-software-develUpgrade LibRawUpgrade gnome-session-kiosk-sessionUpgrade gnome-session-debuginfoUpgrade LibRaw-develUpgrade webkit2gtk3-develUpgrade accountsservice-develUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-settings-daemon-debugsourceUpgrade mutterUpgrade gnome-autoarUpgrade gtk3-develUpgrade gnome-settings-daemon-debuginfoUpgrade accountsservice-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-commonUpgrade gnome-classic-sessionUpgrade webkitgtk4-docUpgrade mutter-develUpgrade gnome-online-accounts-debuginfoUpgrade gnome-online-accountsUpgrade webkit2gtk3-jsc-develUpgrade webkitgtk4-debuginfo | Nov 10, 2021 | Sep 8, 2021 |
| Rocky_linux | — | Upgrade mutter-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-calculator-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-autoar-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade vino-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade accountsserviceUpgrade gnome-settings-daemonUpgrade gnome-session-xsessionUpgrade gnome-software-develUpgrade gnome-session-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-calculator-debugsourceUpgrade accountsservice-debuginfoUpgrade gdm-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-shellUpgrade gdm-debugsourceUpgrade gtk3-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gtk3-debuginfoUpgrade mutter-debugsourceUpgrade webkit2gtk3-jscUpgrade gnome-session-debuginfoUpgrade webkit2gtk3Upgrade accountsservice-libsUpgrade gnome-session-wayland-sessionUpgrade accountsservice-develUpgrade gtk3-immodule-ximUpgrade gtk3-devel-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-softwareUpgrade mutterUpgrade gnome-autoarUpgrade vino-debuginfoUpgrade vinoUpgrade mutter-develUpgrade LibRawUpgrade gnome-session-kiosk-sessionUpgrade gnome-sessionUpgrade LibRaw-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-control-center-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-online-accountsUpgrade gnome-control-centerUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-calculatorUpgrade gdmUpgrade webkit2gtk3-develUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3Upgrade LibRaw-develUpgrade gnome-software-debugsourceUpgrade LibRaw-debuginfoUpgrade gtk3-develUpgrade gnome-software-debuginfoUpgrade accountsservice-libs-debuginfo | May 5, 2022 | Sep 8, 2021 |
| Suse | — | Upgrade webkit2gtk-4-1-langUpgrade libsoup-langUpgrade typelib-1_0-javascriptcore-4_0Upgrade libsoup-develUpgrade libwebkit2gtk-4_0-37Upgrade typelib-1_0-webkit2webextension-4_1Upgrade typelib-1_0-webkit2-5_0Upgrade libjavascriptcoregtk-4_0-18Upgrade webkit2gtk-4_0-injected-bundlesUpgrade libwebkit2gtk-4_1-0Upgrade libwebkit2gtk-4_0-37-32bitUpgrade webkit2gtk3-develUpgrade typelib-1_0-webkit2-4_0Upgrade libwebkit2gtk-5_0-0Upgrade webkit2gtk-5_0-injected-bundlesUpgrade libjavascriptcoregtk-5_0-0Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade typelib-1_0-webkit2-4_1Upgrade webkit2gtk-5-0-langUpgrade typelib-1_0-javascriptcore-4_1Upgrade webkit2gtk3-minibrowserUpgrade webkit2gtk-4_1-injected-bundlesUpgrade libsoup-2_4-1Upgrade typelib-1_0-Soup-2_4Upgrade webkit-jsc-4Upgrade typelib-1_0-javascriptcore-5_0Upgrade libwebkit2gtk3-langUpgrade libjavascriptcoregtk-4_1-0Upgrade typelib-1_0-webkit2webextension-4_0Upgrade webkit2gtk3-soup2-devel | Aug 4, 2021 | Jul 28, 2021 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Jul 29, 2021 | Jul 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub