vulnerability

Amazon Linux AMI 2: CVE-2021-30890: Security patch for webkitgtk4 (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Aug 24, 2021

Added

Jun 13, 2023

Modified

May 20, 2026

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting.

Solutions

amazon-linux-ami-2-upgrade-webkitgtk4amazon-linux-ami-2-upgrade-webkitgtk4-debuginfoamazon-linux-ami-2-upgrade-webkitgtk4-develamazon-linux-ami-2-upgrade-webkitgtk4-jscamazon-linux-ami-2-upgrade-webkitgtk4-jsc-devel

References

AMAZON-AL2/ALAS-2023-2088
CVE-2021-30890
https://attackerkb.com/topics/CVE-2021-30890
CWE-79
EUVD-EUVD-2021-17807
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-17807

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report