This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-user-themeUpgrade gtk3Upgrade gnome-shell-extension-places-menuUpgrade accountsservice-develUpgrade gdmUpgrade gnome-softwareUpgrade webkit2gtk3-develUpgrade gtk-update-icon-cacheUpgrade accountsservice-libsUpgrade LibRawUpgrade gnome-shell-extension-window-listUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-native-window-placementUpgrade gsettings-desktop-schemas-develUpgrade gnome-shellUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-control-center-filesystemUpgrade mutter-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade LibRaw-develUpgrade gnome-shell-extension-top-iconsUpgrade webkit2gtk3-jscUpgrade gnome-software-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3Upgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-apps-menuUpgrade vinoUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-jsc-develUpgrade accountsserviceUpgrade gnome-session-xsessionUpgrade gnome-sessionUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-calculatorUpgrade gnome-online-accountsUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-windowsNavigatorUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3-develUpgrade mutterUpgrade gnome-shell-extension-commonUpgrade gnome-autoarUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-control-centerUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-settings-daemonUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-horizontal-workspaces | May 4, 2022 | Apr 2, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Apr 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-jscUpgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfo | Jun 13, 2023 | Apr 2, 2021 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Feb 19, 2021 | Feb 19, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 2, 2021 |
| Centos_linux | — | Upgrade gnome-shellUpgrade gnome-session-wayland-sessionUpgrade gnome-online-accounts-develUpgrade gnome-calculatorUpgrade gtk3-immodules-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-autoarUpgrade LibRaw-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gtk3Upgrade gnome-sessionUpgrade accountsserviceUpgrade mutter-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-control-center-debuginfoUpgrade webkit2gtk3-develUpgrade webkit2gtk3-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-control-center-filesystemUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade gnome-session-debuginfoUpgrade gdmUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-online-accountsUpgrade gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-softwareUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gdm-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-places-menuUpgrade accountsservice-libsUpgrade webkit2gtk3-jsc-debuginfoUpgrade LibRawUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-top-iconsUpgrade vinoUpgrade LibRaw-debuginfoUpgrade gnome-autoar-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-session-xsessionUpgrade mutter-tests-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-drive-menuUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-online-accounts-debuginfoUpgrade vino-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-autoar-debuginfoUpgrade vino-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade mutterUpgrade gnome-shell-extension-launch-new-instanceUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-centerUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsservice-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-extension-commonUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3Upgrade gtk3-debuginfoUpgrade gtk3-tests-debuginfoUpgrade accountsservice-debuginfoUpgrade mutter-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gdm-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-apps-menuUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-debugsourceUpgrade gnome-software-debugsource | Nov 10, 2021 | Apr 2, 2021 |
| Debian | — | Upgrade webkit2gtkUpgrade wpewebkit | Mar 29, 2021 | Mar 29, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | May 3, 2021 | Apr 2, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.30.6-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Apr 2, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-softwareUpgrade webkit2gtk3-jscUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-window-listUpgrade gdmUpgrade gnome-online-accounts-develUpgrade gsettings-desktop-schemas-develUpgrade mutter-develUpgrade webkit2gtk3Upgrade accountsservice-develUpgrade LibRawUpgrade gtk3Upgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-software-develUpgrade gnome-classic-sessionUpgrade mutterUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-session-kiosk-sessionUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-user-themeUpgrade accountsserviceUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-places-menuUpgrade webkit2gtk3-develUpgrade accountsservice-libsUpgrade gnome-shell-extension-auto-move-windowsUpgrade gsettings-desktop-schemasUpgrade gnome-autoarUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-drive-menuUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-desktop-iconsUpgrade vinoUpgrade LibRaw-develUpgrade gnome-session-xsessionUpgrade gnome-online-accountsUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-window-grouperUpgrade gnome-calculatorUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shellUpgrade gnome-shell-extension-launch-new-instanceUpgrade webkit2gtk3-jsc-develUpgrade gtk3-develUpgrade gnome-shell-extension-commonUpgrade gnome-sessionUpgrade gnome-control-center | Nov 17, 2021 | Mar 22, 2021 |
| Redhat_linux | — | Upgrade gtk3-devel-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-software-debugsourceUpgrade gnome-autoar-debuginfoUpgrade LibRaw-debuginfoNo solution existsUpgrade mutter-develUpgrade mutter-tests-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-software-develUpgrade accountsserviceUpgrade gdm-debuginfoUpgrade LibRaw-debugsourceUpgrade mutterUpgrade webkit2gtk3-develUpgrade LibRawUpgrade gnome-control-center-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-debugsourceUpgrade gnome-sessionUpgrade gnome-softwareUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-settings-daemon-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-session-wayland-sessionUpgrade accountsservice-libs-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-shell-extension-updates-dialogUpgrade webkit2gtk3Upgrade gnome-shell-extension-workspace-indicatorUpgrade accountsservice-develUpgrade gnome-control-centerUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-window-listUpgrade accountsservice-debugsourceUpgrade gnome-shell-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-control-center-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade gnome-software-debuginfoUpgrade webkitgtk4-develUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gdm-debugsourceUpgrade gnome-classic-sessionUpgrade gnome-online-accounts-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-autoarUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-debuginfoUpgrade gtk3-develUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-calculator-debuginfoUpgrade gtk3-tests-debuginfoUpgrade webkitgtk4-docUpgrade gnome-shell-extension-places-menuUpgrade vino-debuginfoUpgrade accountsservice-libsUpgrade webkitgtk4-jsc-develUpgrade gnome-online-accountsUpgrade LibRaw-develUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-panel-favoritesUpgrade gdmUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-settings-daemonUpgrade vinoUpgrade gnome-online-accounts-develUpgrade mutter-debuginfoUpgrade gnome-calculatorUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-session-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade webkitgtk4-jscUpgrade gtk-update-icon-cacheUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade mutter-debugsourceUpgrade gtk3-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade vino-debugsourceUpgrade gtk3Upgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-windowsNavigatorUpgrade webkitgtk4-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade accountsservice-debuginfoUpgrade gnome-shellUpgrade webkitgtk4 | Nov 10, 2021 | Apr 2, 2021 |
| Rocky_linux | — | Upgrade gdm-debuginfoUpgrade accountsserviceUpgrade gtk3-immodule-ximUpgrade webkit2gtk3Upgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-software-develUpgrade gnome-calculator-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gtk-update-icon-cacheUpgrade gnome-online-accounts-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-sessionUpgrade gsettings-desktop-schemas-develUpgrade LibRawUpgrade webkit2gtk3-debugsourceUpgrade gnome-autoar-debugsourceUpgrade accountsservice-libsUpgrade accountsservice-libs-debuginfoUpgrade mutter-debuginfoUpgrade LibRaw-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-settings-daemonUpgrade gnome-settings-daemon-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-software-debugsourceUpgrade vino-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade accountsservice-debugsourceUpgrade gtk3Upgrade gnome-control-centerUpgrade gnome-control-center-debugsourceUpgrade gnome-session-xsessionUpgrade mutter-develUpgrade mutterUpgrade gnome-shell-debugsourceUpgrade gnome-session-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-calculator-debuginfoUpgrade mutter-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-calculatorUpgrade gnome-online-accounts-develUpgrade gnome-control-center-debuginfoUpgrade vinoUpgrade gtk3-debuginfoUpgrade LibRaw-debugsourceUpgrade vino-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-autoarUpgrade webkit2gtk3-develUpgrade gnome-softwareUpgrade webkit2gtk3-jscUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-software-debuginfoUpgrade gdm-debugsourceUpgrade LibRaw-develUpgrade accountsservice-develUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-online-accountsUpgrade gtk3-develUpgrade gdmUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shellUpgrade gtk3-immodule-xim-debuginfo | Mar 12, 2024 | Apr 2, 2021 |
| Suse | — | Upgrade typelib-1_0-javascriptcore-4_1Upgrade webkit2gtk3-develUpgrade typelib-1_0-javascriptcore-5_0Upgrade webkit2gtk-4-1-langUpgrade typelib-1_0-webkit2webextension-4_1Upgrade typelib-1_0-webkit2-4_1Upgrade libwebkit2gtk-5_0-0Upgrade libjavascriptcoregtk-5_0-0Upgrade typelib-1_0-javascriptcore-4_0Upgrade libjavascriptcoregtk-4_0-18Upgrade libwebkit2gtk-4_0-37Upgrade webkit2gtk-4_0-injected-bundlesUpgrade libjavascriptcoregtk-4_1-0Upgrade typelib-1_0-webkit2-5_0Upgrade webkit2gtk3-soup2-develUpgrade webkit2gtk-5_0-injected-bundlesUpgrade webkit2gtk-4_1-injected-bundlesUpgrade libwebkit2gtk-4_1-0Upgrade webkit2gtk3-minibrowserUpgrade typelib-1_0-webkit2-4_0Upgrade webkit2gtk-5-0-langUpgrade libwebkit2gtk3-langUpgrade libjavascriptcoregtk-4_0-18-32bitUpgrade typelib-1_0-webkit2webextension-4_0Upgrade webkit-jsc-4Upgrade libwebkit2gtk-4_0-37-32bit | May 1, 2021 | Mar 29, 2021 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Mar 30, 2021 | Mar 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub