This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade accountsserviceUpgrade gtk3-develUpgrade LibRaw-develUpgrade gnome-shellUpgrade gnome-control-center-filesystemUpgrade LibRawUpgrade webkit2gtk3Upgrade accountsservice-libsUpgrade mutter-develUpgrade gnome-online-accounts-develUpgrade gnome-software-develUpgrade accountsservice-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3Upgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-native-window-placementUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-apps-menuUpgrade gtk-update-icon-cacheUpgrade gdmUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade vinoUpgrade gnome-classic-sessionUpgrade gnome-softwareUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-user-themeUpgrade webkit2gtk3-develUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-calculatorUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-commonUpgrade webkit2gtk3-jsc-develUpgrade gnome-session-wayland-sessionUpgrade gnome-control-centerUpgrade gnome-session-kiosk-sessionUpgrade gnome-autoarUpgrade gnome-sessionUpgrade gsettings-desktop-schemasUpgrade gnome-online-accountsUpgrade gnome-shell-extension-drive-menuUpgrade mutterUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-horizontal-workspaces | May 4, 2022 | Apr 2, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Apr 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-develUpgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-devel | Jun 13, 2023 | Apr 2, 2021 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Feb 19, 2021 | Feb 19, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 2, 2021 |
| Centos_linux | — | Upgrade webkit2gtk3-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-places-menuUpgrade gnome-control-center-filesystemUpgrade accountsservice-libsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shellUpgrade gnome-session-wayland-sessionUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade LibRawUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade gnome-session-debuginfoUpgrade gdmUpgrade gnome-control-center-debuginfoUpgrade gnome-calculatorUpgrade gtk3-immodules-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-autoarUpgrade LibRaw-debugsourceUpgrade gdm-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade accountsservice-libs-debuginfoUpgrade gnome-softwareUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-native-window-placementUpgrade gtk3-devel-debuginfoUpgrade gtk3Upgrade mutter-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gtk3-develUpgrade gnome-online-accountsUpgrade gnome-sessionUpgrade accountsserviceUpgrade gnome-settings-daemon-debuginfoUpgrade webkit2gtk3-develUpgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gdm-debugsourceUpgrade mutter-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk3-tests-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-autoar-debugsourceUpgrade webkit2gtk3Upgrade gnome-shell-debugsourceUpgrade gnome-software-debugsourceUpgrade webkit2gtk3-jscUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-extension-commonUpgrade accountsservice-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade vinoUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-drive-menuUpgrade mutterUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade mutter-tests-debuginfoUpgrade gnome-control-center-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-centerUpgrade gnome-shell-extension-launch-new-instanceUpgrade LibRaw-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-session-xsessionUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade accountsservice-debugsourceUpgrade gnome-settings-daemonUpgrade vino-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade vino-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-session-kiosk-sessionUpgrade gnome-online-accounts-debugsource | Nov 10, 2021 | Apr 2, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Mar 29, 2021 | Mar 29, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | May 3, 2021 | Apr 2, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.30.6-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Apr 2, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-panel-favoritesUpgrade gnome-session-wayland-sessionUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-workspace-indicatorUpgrade mutterUpgrade accountsserviceUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-user-themeUpgrade gdmUpgrade gnome-software-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-online-accounts-develUpgrade gtk3-immodule-ximUpgrade webkit2gtk3Upgrade gnome-shell-extension-dash-to-dockUpgrade mutter-develUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-softwareUpgrade gnome-shell-extension-systemMonitorUpgrade gsettings-desktop-schemas-develUpgrade gnome-classic-sessionUpgrade webkit2gtk3-develUpgrade gtk3Upgrade gnome-control-center-filesystemUpgrade LibRawUpgrade accountsservice-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-places-menuUpgrade gnome-control-centerUpgrade gnome-settings-daemonUpgrade gnome-sessionUpgrade gnome-shell-extension-commonUpgrade gnome-calculatorUpgrade gnome-shell-extension-window-grouperUpgrade gtk-update-icon-cacheUpgrade gnome-autoarUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shellUpgrade gnome-shell-extension-disable-screenshieldUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-auto-move-windowsUpgrade accountsservice-libsUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-online-accountsUpgrade LibRaw-develUpgrade vinoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3-develUpgrade webkit2gtk3-jsc-devel | Nov 17, 2021 | Mar 22, 2021 |
| Redhat_linux | — | Upgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-session-debugsourceNo solution existsUpgrade gnome-shell-debuginfoUpgrade gnome-shell-debugsourceUpgrade gsettings-desktop-schemasUpgrade accountsservice-libs-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade LibRawUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-session-wayland-sessionUpgrade gnome-control-centerUpgrade gnome-shell-extension-systemMonitorUpgrade gtk3-devel-debuginfoUpgrade gnome-sessionUpgrade gnome-shell-extension-updates-dialogUpgrade LibRaw-debugsourceUpgrade webkit2gtk3Upgrade gnome-control-center-debuginfoUpgrade gnome-control-center-debugsourceUpgrade webkit2gtk3-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade webkitgtk4-develUpgrade gdm-debuginfoUpgrade gnome-softwareUpgrade accountsservice-debugsourceUpgrade accountsserviceUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gnome-software-develUpgrade mutterUpgrade webkit2gtk3-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-window-listUpgrade accountsservice-develUpgrade gnome-session-kiosk-sessionUpgrade LibRaw-debuginfoUpgrade mutter-develUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-software-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade vino-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gdmUpgrade gtk3Upgrade webkitgtk4-debuginfoUpgrade gnome-calculator-debugsourceUpgrade vino-debugsourceUpgrade gnome-autoarUpgrade gnome-shell-extension-dash-to-dockUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade webkit2gtk3-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-online-accounts-develUpgrade gnome-settings-daemonUpgrade mutter-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gtk3-immodules-debuginfoUpgrade vinoUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-center-filesystemUpgrade webkit2gtk3-jsc-develUpgrade gnome-shellUpgrade mutter-debugsourceUpgrade gnome-calculator-debuginfoUpgrade gnome-classic-sessionUpgrade gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gdm-debugsourceUpgrade gtk3-debuginfoUpgrade gtk3-tests-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gtk3-debugsourceUpgrade webkit2gtk3-jscUpgrade gnome-online-accounts-debugsourceUpgrade webkitgtk4-jsc-develUpgrade LibRaw-samples-debuginfoUpgrade gnome-calculatorUpgrade gnome-shell-extension-windowsNavigatorUpgrade webkitgtk4-docUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gtk-update-icon-cacheUpgrade accountsservice-debuginfoUpgrade accountsservice-libsUpgrade LibRaw-develUpgrade gnome-shell-extension-places-menuUpgrade webkitgtk4-jscUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-online-accountsUpgrade webkitgtk4Upgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-common | Nov 10, 2021 | Apr 2, 2021 |
| Rocky_linux | — | Upgrade gdmUpgrade gnome-calculator-debuginfoUpgrade gnome-shellUpgrade LibRaw-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-softwareUpgrade webkit2gtk3-jscUpgrade LibRaw-develUpgrade gtk3-immodule-xim-debuginfoUpgrade vino-debuginfoUpgrade gnome-online-accountsUpgrade gtk-update-icon-cache-debuginfoUpgrade accountsservice-develUpgrade gdm-debugsourceUpgrade gnome-autoarUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-calculatorUpgrade gnome-session-kiosk-sessionUpgrade webkit2gtk3-develUpgrade mutter-debugsourceUpgrade vinoUpgrade gnome-session-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-debugsourceUpgrade gtk3-develUpgrade gnome-control-center-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-sessionUpgrade gtk3-debugsourceUpgrade gtk3Upgrade gnome-software-develUpgrade gnome-settings-daemonUpgrade gdm-debuginfoUpgrade webkit2gtk3Upgrade gtk-update-icon-cacheUpgrade accountsserviceUpgrade mutter-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gnome-autoar-debugsourceUpgrade accountsservice-libsUpgrade gnome-online-accounts-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade accountsservice-debugsourceUpgrade mutterUpgrade mutter-develUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade vino-debugsourceUpgrade gtk3-immodule-ximUpgrade gnome-session-xsessionUpgrade gnome-control-center-debugsourceUpgrade gnome-control-centerUpgrade LibRaw-debuginfoUpgrade LibRawUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade gtk3-devel-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-debuginfo | Mar 12, 2024 | Apr 2, 2021 |
| Suse | — | Upgrade libwebkit2gtk-5_0-0Upgrade typelib-1_0-webkit2-4_1Upgrade typelib-1_0-javascriptcore-5_0Upgrade webkit2gtk-4-1-langUpgrade typelib-1_0-javascriptcore-4_1Upgrade typelib-1_0-webkit2webextension-4_1Upgrade webkit2gtk3-develUpgrade libjavascriptcoregtk-4_1-0Upgrade libwebkit2gtk-4_0-37Upgrade webkit-jsc-4Upgrade typelib-1_0-webkit2webextension-4_0Upgrade typelib-1_0-webkit2-4_0Upgrade libwebkit2gtk-4_1-0Upgrade typelib-1_0-webkit2-5_0Upgrade webkit2gtk-5-0-langUpgrade libwebkit2gtk3-langUpgrade webkit2gtk3-minibrowserUpgrade webkit2gtk-5_0-injected-bundlesUpgrade webkit2gtk3-soup2-develUpgrade webkit2gtk-4_0-injected-bundlesUpgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libjavascriptcoregtk-4_0-18Upgrade webkit2gtk-4_1-injected-bundlesUpgrade libjavascriptcoregtk-5_0-0Upgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-javascriptcore-4_0 | May 1, 2021 | Mar 29, 2021 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Mar 30, 2021 | Mar 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub