This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gtk3-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-commonUpgrade gnome-session-xsessionUpgrade gnome-autoarUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gdmUpgrade gnome-software-develUpgrade webkit2gtk3Upgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shellUpgrade LibRaw-develUpgrade gnome-classic-sessionUpgrade gtk3Upgrade gnome-shell-extension-panel-favoritesUpgrade accountsservice-libsUpgrade gnome-shell-extension-user-themeUpgrade gnome-softwareUpgrade gnome-shell-extension-apps-menuUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-dash-to-dockUpgrade gtk3-immodule-ximUpgrade gtk-update-icon-cacheUpgrade gnome-control-center-filesystemUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-gesture-inhibitorUpgrade accountsservice-develUpgrade mutter-develUpgrade gnome-settings-daemonUpgrade accountsserviceUpgrade gnome-shell-extension-desktop-iconsUpgrade gsettings-desktop-schemasUpgrade gnome-sessionUpgrade gnome-control-centerUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-calculatorUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-session-wayland-sessionUpgrade gnome-online-accountsUpgrade mutterUpgrade gnome-shell-extension-drive-menu | May 4, 2022 | Apr 2, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Apr 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfo | Jun 13, 2023 | Apr 2, 2021 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Feb 19, 2021 | Feb 1, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 2, 2021 |
| Centos_linux | — | Upgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-places-menuUpgrade gnome-control-center-filesystemUpgrade accountsservice-libsUpgrade gnome-softwareUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gdm-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gtk3Upgrade gnome-calculator-debuginfoUpgrade gnome-online-accountsUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-debuginfoUpgrade gtk3-debugsourceUpgrade gdmUpgrade gnome-shell-extension-user-themeUpgrade gnome-session-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-sessionUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shellUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade LibRawUpgrade gnome-shell-extension-window-grouperUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade accountsserviceUpgrade mutter-debuginfoUpgrade gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-session-wayland-sessionUpgrade gtk3-immodules-debuginfoUpgrade gnome-autoarUpgrade LibRaw-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-calculatorUpgrade webkit2gtk3-develUpgrade webkit2gtk3-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-auto-move-windowsUpgrade gsettings-desktop-schemas-develUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-extension-commonUpgrade gnome-autoar-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade mutter-debugsourceUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-desktop-iconsUpgrade accountsservice-debuginfoUpgrade gnome-shell-debugsourceUpgrade gtk3-tests-debuginfoUpgrade webkit2gtk3Upgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-software-debugsourceUpgrade LibRaw-debuginfoUpgrade vino-debugsourceUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-settings-daemon-debugsourceUpgrade mutter-tests-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade LibRaw-samples-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-debuginfoUpgrade gnome-control-centerUpgrade mutterUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade vino-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade vinoUpgrade gnome-shell-extension-apps-menuUpgrade gnome-autoar-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-session-xsessionUpgrade gnome-control-center-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3-devel-debuginfoUpgrade gtk-update-icon-cache-debuginfo | Nov 10, 2021 | Apr 2, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Mar 29, 2021 | Mar 29, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | May 3, 2021 | Apr 2, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.30.6-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Apr 2, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gtk3Upgrade LibRawUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-user-themeUpgrade mutter-develUpgrade gnome-session-wayland-sessionUpgrade webkit2gtk3-jscUpgrade gnome-software-develUpgrade mutterUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-softwareUpgrade gnome-shell-extension-dash-to-dockUpgrade gdmUpgrade gnome-session-kiosk-sessionUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-window-listUpgrade accountsserviceUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-online-accounts-develUpgrade webkit2gtk3Upgrade gnome-shell-extension-updates-dialogUpgrade gsettings-desktop-schemas-develUpgrade accountsservice-develUpgrade gnome-shell-extension-places-menuUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-control-center-filesystemUpgrade gtk-update-icon-cacheUpgrade gnome-online-accountsUpgrade gnome-shell-extension-windowsNavigatorUpgrade LibRaw-develUpgrade vinoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-sessionUpgrade gnome-autoarUpgrade webkit2gtk3-jsc-develUpgrade gnome-control-centerUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-auto-move-windowsUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3-develUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shellUpgrade gnome-calculatorUpgrade accountsservice-libsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-session-xsessionUpgrade gnome-settings-daemon | Nov 17, 2021 | Mar 22, 2021 |
| Redhat_linux | — | Upgrade LibRaw-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-sessionUpgrade mutterUpgrade gnome-control-center-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-software-debugsourceUpgrade accountsservice-develUpgrade webkit2gtk3-develUpgrade LibRaw-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gtk3-immodule-ximUpgrade gnome-session-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-control-center-debugsourceUpgrade gnome-online-accounts-debuginfoNo solution existsUpgrade mutter-tests-debuginfoUpgrade accountsserviceUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3Upgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-updates-dialogUpgrade mutter-develUpgrade gnome-software-develUpgrade gnome-control-centerUpgrade gnome-softwareUpgrade gnome-shell-extension-window-listUpgrade LibRawUpgrade gdm-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-settings-daemon-debuginfoUpgrade gsettings-desktop-schemasUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-debuginfoUpgrade webkitgtk4-develUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade gnome-session-debuginfoUpgrade gtk3Upgrade LibRaw-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-center-filesystemUpgrade vino-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gtk3-debugsourceUpgrade webkitgtk4-jscUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-session-xsessionUpgrade webkitgtk4-docUpgrade gnome-calculatorUpgrade gnome-shell-extension-places-menuUpgrade mutter-debuginfoUpgrade vinoUpgrade gtk3-immodules-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-drive-menuUpgrade gnome-settings-daemonUpgrade gtk3-debuginfoUpgrade webkitgtk4Upgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shellUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-window-grouperUpgrade vino-debugsourceUpgrade webkitgtk4-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkitgtk4-jsc-develUpgrade gnome-calculator-debuginfoUpgrade gdm-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3-develUpgrade webkit2gtk3-jsc-develUpgrade gnome-calculator-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gnome-classic-sessionUpgrade gdmUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-autoarUpgrade mutter-debugsourceUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-dash-to-dockUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-jscUpgrade gnome-online-accounts-debugsourceUpgrade gnome-online-accountsUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3-debugsourceUpgrade accountsservice-libs | Nov 10, 2021 | Apr 2, 2021 |
| Rocky_linux | — | Upgrade gnome-calculator-debugsourceUpgrade gtk3-debugsourceUpgrade gdm-debuginfoUpgrade gtk3Upgrade webkit2gtk3-debugsourceUpgrade accountsserviceUpgrade LibRawUpgrade LibRaw-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-settings-daemonUpgrade webkit2gtk3-jsc-develUpgrade accountsservice-debugsourceUpgrade webkit2gtk3Upgrade mutter-develUpgrade gnome-control-centerUpgrade mutterUpgrade gnome-control-center-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-wayland-sessionUpgrade gnome-session-xsessionUpgrade gnome-session-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-software-develUpgrade gnome-sessionUpgrade gnome-software-debugsourceUpgrade mutter-debuginfoUpgrade accountsservice-libsUpgrade gnome-autoar-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade vino-debugsourceUpgrade gtk3-immodule-ximUpgrade gnome-autoarUpgrade vino-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gsettings-desktop-schemasUpgrade gdmUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shellUpgrade gnome-online-accounts-develUpgrade gnome-calculatorUpgrade gtk3-develUpgrade gnome-online-accountsUpgrade mutter-debugsourceUpgrade LibRaw-debugsourceUpgrade gnome-calculator-debuginfoUpgrade webkit2gtk3-jscUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-softwareUpgrade LibRaw-develUpgrade accountsservice-develUpgrade gnome-settings-daemon-debuginfoUpgrade gdm-debugsourceUpgrade gnome-session-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-control-center-debuginfoUpgrade vinoUpgrade gtk3-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-devel | Mar 12, 2024 | Apr 2, 2021 |
| Suse | — | Upgrade webkit2gtk-4-1-langUpgrade typelib-1_0-javascriptcore-5_0Upgrade typelib-1_0-webkit2webextension-4_1Upgrade webkit2gtk3-develUpgrade typelib-1_0-webkit2-4_1Upgrade libwebkit2gtk-5_0-0Upgrade typelib-1_0-javascriptcore-4_1Upgrade webkit2gtk-5-0-langUpgrade webkit2gtk3-minibrowserUpgrade libjavascriptcoregtk-5_0-0Upgrade libjavascriptcoregtk-4_0-18Upgrade webkit-jsc-4Upgrade libwebkit2gtk-4_0-37Upgrade webkit2gtk-4_1-injected-bundlesUpgrade webkit2gtk-5_0-injected-bundlesUpgrade typelib-1_0-webkit2-5_0Upgrade typelib-1_0-webkit2webextension-4_0Upgrade typelib-1_0-webkit2-4_0Upgrade libwebkit2gtk3-langUpgrade libjavascriptcoregtk-4_1-0Upgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-javascriptcore-4_0Upgrade libwebkit2gtk-4_1-0Upgrade webkit2gtk3-soup2-develUpgrade webkit2gtk-4_0-injected-bundlesUpgrade libjavascriptcoregtk-4_0-18-32bit | May 1, 2021 | Mar 29, 2021 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Mar 30, 2021 | Mar 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub