This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-software-develUpgrade gdmUpgrade gnome-online-accounts-develUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-top-iconsUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-workspace-indicatorUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3Upgrade accountsservice-develUpgrade vinoUpgrade gnome-shell-extension-places-menuUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-softwareUpgrade LibRaw-develUpgrade gnome-shellUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-window-listUpgrade mutter-develUpgrade LibRawUpgrade accountsservice-libsUpgrade gtk3Upgrade gnome-shell-extension-window-grouperUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-commonUpgrade gnome-sessionUpgrade gnome-shell-extension-launch-new-instanceUpgrade mutterUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-control-centerUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-session-wayland-sessionUpgrade gtk3-develUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-windowsNavigatorUpgrade gsettings-desktop-schemasUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsserviceUpgrade gnome-settings-daemonUpgrade gnome-autoarUpgrade gnome-calculatorUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-online-accounts | May 4, 2022 | Apr 2, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Apr 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jsc | Jun 13, 2023 | Apr 2, 2021 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Feb 19, 2021 | Feb 19, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 2, 2021 |
| Centos_linux | — | Upgrade mutter-tests-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-launch-new-instanceUpgrade mutterUpgrade gnome-control-centerUpgrade gnome-classic-sessionUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3Upgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-jsc-develUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-desktop-iconsUpgrade accountsservice-debuginfoUpgrade gdm-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-systemMonitorUpgrade LibRaw-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-settings-daemonUpgrade gtk3-tests-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gsettings-desktop-schemasUpgrade gnome-control-center-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-autoar-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-shell-debugsourceUpgrade mutter-debugsourceUpgrade gnome-shell-extension-commonUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade vino-debugsourceUpgrade vino-debuginfoUpgrade vinoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-session-wayland-sessionUpgrade gnome-shellUpgrade accountsservice-libsUpgrade gnome-sessionUpgrade gtk3-devel-debuginfoUpgrade accountsserviceUpgrade gnome-shell-extension-native-window-placementUpgrade gtk3-develUpgrade gnome-calculator-debuginfoUpgrade mutter-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade LibRawUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-debugsourceUpgrade gtk3Upgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-window-listUpgrade gnome-online-accountsUpgrade LibRaw-debugsourceUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-autoarUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-places-menuUpgrade gnome-calculatorUpgrade webkit2gtk3-develUpgrade gdm-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-softwareUpgrade gnome-control-center-debuginfoUpgrade gdmUpgrade gnome-shell-extension-window-grouperUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-updates-dialogUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade accountsservice-libs-debuginfo | Nov 10, 2021 | Apr 2, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Mar 29, 2021 | Mar 29, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | May 3, 2021 | Apr 2, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.30.6-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Apr 2, 2021 |
| Oracle_linux | — | Upgrade vinoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk-update-icon-cacheUpgrade gnome-shellUpgrade gnome-session-xsessionUpgrade gnome-online-accountsUpgrade LibRaw-develUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-horizontal-workspacesUpgrade accountsservice-libsUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-calculatorUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-sessionUpgrade webkit2gtk3-jsc-develUpgrade gtk3-develUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-autoarUpgrade gnome-control-centerUpgrade mutter-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-apps-menuUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-native-window-placementUpgrade LibRawUpgrade gtk3Upgrade gnome-classic-sessionUpgrade gnome-shell-extension-systemMonitorUpgrade accountsservice-develUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3Upgrade gtk3-immodule-ximUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-panel-favoritesUpgrade accountsserviceUpgrade mutterUpgrade gnome-software-develUpgrade gnome-shell-extension-user-themeUpgrade gnome-session-wayland-sessionUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-window-listUpgrade gdmUpgrade gnome-softwareUpgrade gnome-shell-extension-gesture-inhibitorUpgrade webkit2gtk3-devel | Nov 17, 2021 | Mar 22, 2021 |
| Redhat_linux | — | Upgrade gnome-shell-extension-updates-dialogUpgrade accountsservice-libs-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade webkitgtk4-develUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-autoar-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-session-wayland-sessionUpgrade gdm-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-debuginfoUpgrade accountsserviceUpgrade accountsservice-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade gnome-software-debuginfoUpgrade accountsservice-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-control-center-debuginfoUpgrade gnome-softwareUpgrade gtk3-immodule-ximUpgrade webkit2gtk3-develUpgrade gnome-sessionUpgrade gnome-settings-daemon-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-session-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade mutterUpgrade gnome-settings-daemon-debugsourceUpgrade LibRaw-debugsourceUpgrade LibRawNo solution existsUpgrade mutter-develUpgrade gnome-shell-extension-window-listUpgrade mutter-tests-debuginfoUpgrade gnome-software-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-control-centerUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-software-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3Upgrade mutter-debuginfoUpgrade gnome-autoarUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk-update-icon-cacheUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-user-themeUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk3-immodule-xim-debuginfoUpgrade vino-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-immodules-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3-jsc-debuginfoUpgrade accountsservice-libsUpgrade webkitgtk4-jsc-develUpgrade LibRaw-develUpgrade gnome-session-xsessionUpgrade gnome-online-accountsUpgrade gnome-control-center-filesystemUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade webkitgtk4-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkitgtk4-docUpgrade gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-calculatorUpgrade gnome-classic-sessionUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade gnome-shellUpgrade gnome-settings-daemonUpgrade gtk3Upgrade webkit2gtk3-jscUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-launch-new-instanceUpgrade vinoUpgrade mutter-debugsourceUpgrade gdm-debugsourceUpgrade webkitgtk4-jscUpgrade gtk3-tests-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade vino-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gdmUpgrade webkitgtk4Upgrade gnome-shell-extension-dash-to-dock | Nov 10, 2021 | Apr 2, 2021 |
| Rocky_linux | — | Upgrade webkit2gtk3-jsc-develUpgrade gnome-control-center-debugsourceUpgrade gnome-software-develUpgrade gnome-sessionUpgrade gnome-control-centerUpgrade gnome-session-wayland-sessionUpgrade gnome-settings-daemonUpgrade mutter-debuginfoUpgrade accountsservice-libsUpgrade webkit2gtk3Upgrade gtk3-immodule-ximUpgrade gtk3-debugsourceUpgrade gdm-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-autoar-debugsourceUpgrade mutterUpgrade accountsservice-libs-debuginfoUpgrade mutter-develUpgrade gtk-update-icon-cacheUpgrade gnome-session-xsessionUpgrade gnome-online-accounts-debuginfoUpgrade gtk3Upgrade accountsserviceUpgrade gnome-settings-daemon-debugsourceUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade LibRawUpgrade LibRaw-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-software-debugsourceUpgrade vino-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade mutter-debugsourceUpgrade gnome-session-debuginfoUpgrade vinoUpgrade accountsservice-debuginfoUpgrade gnome-calculatorUpgrade gnome-control-center-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-autoar-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-online-accountsUpgrade gnome-settings-daemon-debuginfoUpgrade gdm-debugsourceUpgrade accountsservice-develUpgrade webkit2gtk3-develUpgrade vino-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-autoarUpgrade LibRaw-debugsourceUpgrade gnome-calculator-debuginfoUpgrade webkit2gtk3-jscUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-softwareUpgrade LibRaw-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-develUpgrade gtk3-immodule-xim-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-shellUpgrade gdmUpgrade gnome-shell-debugsource | Mar 12, 2024 | Apr 2, 2021 |
| Suse | — | Upgrade webkit2gtk-5-0-langUpgrade typelib-1_0-webkit2-5_0Upgrade typelib-1_0-javascriptcore-4_0Upgrade libwebkit2gtk-4_0-37Upgrade webkit-jsc-4Upgrade libjavascriptcoregtk-5_0-0Upgrade libjavascriptcoregtk-4_0-18Upgrade webkit2gtk3-minibrowserUpgrade webkit2gtk3-soup2-develUpgrade webkit2gtk-4_0-injected-bundlesUpgrade libjavascriptcoregtk-4_0-18-32bitUpgrade webkit2gtk-4_1-injected-bundlesUpgrade libwebkit2gtk-4_1-0Upgrade typelib-1_0-webkit2-4_0Upgrade libwebkit2gtk3-langUpgrade libwebkit2gtk-4_0-37-32bitUpgrade libjavascriptcoregtk-4_1-0Upgrade typelib-1_0-webkit2webextension-4_0Upgrade webkit2gtk-5_0-injected-bundlesUpgrade webkit2gtk3-develUpgrade libwebkit2gtk-5_0-0Upgrade webkit2gtk-4-1-langUpgrade typelib-1_0-webkit2webextension-4_1Upgrade typelib-1_0-webkit2-4_1Upgrade typelib-1_0-javascriptcore-5_0Upgrade typelib-1_0-javascriptcore-4_1 | May 1, 2021 | Mar 29, 2021 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Mar 30, 2021 | Mar 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub