This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-no-hot-cornerUpgrade mutterUpgrade gtk3-develUpgrade gsettings-desktop-schemasUpgrade gnome-calculatorUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-sessionUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-online-accountsUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-autoarUpgrade gnome-session-xsessionUpgrade gnome-control-centerUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-session-wayland-sessionUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-commonUpgrade accountsserviceUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-softwareUpgrade gnome-shell-extension-native-window-placementUpgrade LibRaw-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3Upgrade gtk3Upgrade vinoUpgrade gnome-online-accounts-develUpgrade accountsservice-libsUpgrade gnome-shell-extension-window-grouperUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-systemMonitorUpgrade mutter-develUpgrade webkit2gtk3-develUpgrade LibRawUpgrade gnome-shellUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-apps-menuUpgrade gtk3-immodule-ximUpgrade gdmUpgrade gnome-shell-extension-panel-favoritesUpgrade accountsservice-develUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-gesture-inhibitorUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-top-iconsUpgrade gnome-software-develUpgrade gsettings-desktop-schemas-develUpgrade gtk-update-icon-cache | May 4, 2022 | Apr 2, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Apr 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-devel | Jun 13, 2023 | Apr 2, 2021 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Feb 19, 2021 | Feb 19, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 2, 2021 |
| Centos_linux | — | Upgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-systemMonitorUpgrade LibRaw-samples-debuginfoUpgrade gnome-control-centerUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-launch-new-instanceUpgrade webkit2gtk3-devel-debuginfoUpgrade vino-debugsourceUpgrade vino-debuginfoUpgrade vinoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3Upgrade gtk3-tests-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-session-kiosk-sessionUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade LibRaw-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-desktop-iconsUpgrade webkit2gtk3-jscUpgrade gnome-software-debugsourceUpgrade mutter-tests-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-drive-menuUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade accountsservice-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-autoar-debugsourceUpgrade mutter-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-calculator-debugsourceUpgrade gdm-debugsourceUpgrade accountsservice-debuginfoUpgrade mutterUpgrade gnome-sessionUpgrade gtk3Upgrade gnome-control-center-filesystemUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-window-listUpgrade gnome-shellUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-places-menuUpgrade gnome-online-accounts-develUpgrade gnome-session-wayland-sessionUpgrade LibRawUpgrade gtk3-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-online-accountsUpgrade accountsservice-libsUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-calculator-debuginfoUpgrade gnome-calculatorUpgrade mutter-debuginfoUpgrade gnome-autoarUpgrade LibRaw-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-softwareUpgrade webkit2gtk3-develUpgrade gdmUpgrade accountsserviceUpgrade gnome-session-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gdm-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-user-theme | Nov 10, 2021 | Apr 2, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Mar 29, 2021 | Mar 29, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | May 3, 2021 | Apr 2, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.30.6-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Apr 2, 2021 |
| Oracle_linux | — | Upgrade gnome-classic-sessionUpgrade gnome-shell-extension-native-window-placementUpgrade gdmUpgrade webkit2gtk3-develUpgrade gtk3-immodule-ximUpgrade webkit2gtk3Upgrade gnome-shell-extension-window-listUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-systemMonitorUpgrade LibRawUpgrade accountsservice-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-softwareUpgrade gnome-software-develUpgrade mutterUpgrade gnome-session-kiosk-sessionUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-wayland-sessionUpgrade gtk3Upgrade gnome-shell-extension-user-themeUpgrade accountsserviceUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-workspace-indicatorUpgrade mutter-develUpgrade webkit2gtk3-jscUpgrade accountsservice-libsUpgrade gnome-shell-extension-drive-menuUpgrade gnome-calculatorUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shellUpgrade vinoUpgrade LibRaw-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-session-xsessionUpgrade gnome-online-accountsUpgrade gnome-shell-extension-commonUpgrade gnome-settings-daemonUpgrade gnome-sessionUpgrade gtk3-develUpgrade gnome-control-centerUpgrade gnome-autoarUpgrade webkit2gtk3-jsc-develUpgrade gsettings-desktop-schemas | Nov 17, 2021 | Mar 22, 2021 |
| Redhat_linux | — | Upgrade gtk3-immodule-xim-debuginfoUpgrade accountsservice-libsUpgrade gnome-settings-daemonUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-jscUpgrade LibRaw-develUpgrade gnome-online-accountsUpgrade mutter-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade webkitgtk4Upgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gtk3Upgrade gtk-update-icon-cacheUpgrade webkitgtk4-debuginfoUpgrade vino-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-shellUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-session-xsessionUpgrade gnome-online-accounts-debugsourceUpgrade gdmUpgrade webkit2gtk3-jscUpgrade vino-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade webkit2gtk3-jsc-develUpgrade gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkitgtk4-docUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-user-themeUpgrade accountsservice-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-calculator-debugsourceUpgrade gnome-classic-sessionUpgrade vinoUpgrade gnome-calculator-debuginfoUpgrade gnome-calculatorUpgrade gnome-autoarUpgrade mutter-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-control-center-debugsourceUpgrade gnome-software-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-updates-dialogUpgrade mutterUpgrade gnome-session-kiosk-sessionUpgrade accountsservice-libs-debuginfoUpgrade gnome-control-centerUpgrade gnome-software-develUpgrade mutter-tests-debuginfoUpgrade mutter-develNo solution existsUpgrade LibRawUpgrade gtk3-immodule-ximUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-autoar-debuginfoUpgrade LibRaw-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-software-debugsourceUpgrade accountsservice-develUpgrade webkit2gtk3Upgrade gnome-autoar-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-softwareUpgrade gnome-shell-extension-top-iconsUpgrade webkitgtk4-develUpgrade gdm-debuginfoUpgrade gnome-shell-extension-window-listUpgrade gnome-session-wayland-sessionUpgrade accountsserviceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-systemMonitorUpgrade LibRaw-debugsourceUpgrade gnome-control-center-debuginfoUpgrade webkit2gtk3-develUpgrade gnome-sessionUpgrade gnome-session-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-settings-daemon-debuginfo | Nov 10, 2021 | Apr 2, 2021 |
| Rocky_linux | — | Upgrade gtk-update-icon-cacheUpgrade accountsserviceUpgrade webkit2gtk3Upgrade gnome-session-debugsourceUpgrade gnome-software-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gtk3-debugsourceUpgrade gdm-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-debuginfoUpgrade vino-debugsourceUpgrade accountsservice-debugsourceUpgrade gtk3Upgrade gnome-online-accounts-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-calculator-debugsourceUpgrade gnome-settings-daemonUpgrade mutter-debuginfoUpgrade gnome-control-centerUpgrade gtk3-devel-debuginfoUpgrade accountsservice-libsUpgrade gnome-software-develUpgrade gnome-control-center-debugsourceUpgrade gnome-session-xsessionUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gtk3-immodule-ximUpgrade mutterUpgrade LibRaw-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-session-wayland-sessionUpgrade mutter-develUpgrade webkit2gtk3-debugsourceUpgrade gnome-sessionUpgrade LibRawUpgrade vinoUpgrade gnome-online-accounts-develUpgrade gtk3-debuginfoUpgrade gnome-session-debuginfoUpgrade gdm-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-softwareUpgrade webkit2gtk3-jscUpgrade gnome-autoarUpgrade webkit2gtk3-develUpgrade vino-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade LibRaw-develUpgrade gdmUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shellUpgrade gtk3-develUpgrade gsettings-desktop-schemasUpgrade LibRaw-debugsourceUpgrade gnome-calculator-debuginfoUpgrade mutter-debugsourceUpgrade gnome-shell-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-calculatorUpgrade accountsservice-debuginfoUpgrade accountsservice-develUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-online-accountsUpgrade gtk-update-icon-cache-debuginfo | Mar 12, 2024 | Apr 2, 2021 |
| Suse | — | Upgrade typelib-1_0-webkit2webextension-4_1Upgrade typelib-1_0-webkit2-4_1Upgrade webkit2gtk-4-1-langUpgrade libwebkit2gtk-5_0-0Upgrade typelib-1_0-javascriptcore-5_0Upgrade typelib-1_0-javascriptcore-4_1Upgrade webkit2gtk3-develUpgrade typelib-1_0-webkit2-5_0Upgrade webkit2gtk3-minibrowserUpgrade typelib-1_0-webkit2-4_0Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libwebkit2gtk3-langUpgrade webkit2gtk-4_0-injected-bundlesUpgrade webkit-jsc-4Upgrade typelib-1_0-webkit2webextension-4_0Upgrade libjavascriptcoregtk-4_0-18Upgrade libjavascriptcoregtk-5_0-0Upgrade typelib-1_0-javascriptcore-4_0Upgrade libwebkit2gtk-4_0-37-32bitUpgrade libwebkit2gtk-4_0-37Upgrade libwebkit2gtk-4_1-0Upgrade libjavascriptcoregtk-4_1-0Upgrade webkit2gtk-5-0-langUpgrade webkit2gtk3-soup2-develUpgrade webkit2gtk-4_1-injected-bundlesUpgrade webkit2gtk-5_0-injected-bundles | May 1, 2021 | Mar 29, 2021 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Mar 30, 2021 | Mar 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub