This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-software-develUpgrade gnome-softwareUpgrade gdmUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-workspace-indicatorUpgrade LibRaw-develUpgrade gnome-shell-extension-top-iconsUpgrade webkit2gtk3-develUpgrade gnome-shellUpgrade gnome-shell-extension-systemMonitorUpgrade vinoUpgrade gsettings-desktop-schemas-develUpgrade gtk3Upgrade LibRawUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-window-listUpgrade gnome-classic-sessionUpgrade mutter-develUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-window-grouperUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-native-window-placementUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-commonUpgrade gnome-calculatorUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-control-centerUpgrade gnome-session-kiosk-sessionUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-session-xsessionUpgrade gsettings-desktop-schemasUpgrade accountsserviceUpgrade gtk3-develUpgrade gnome-shell-extension-drive-menuUpgrade gnome-sessionUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-session-wayland-sessionUpgrade mutterUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-online-accountsUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-autoar | May 4, 2022 | Apr 2, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Apr 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-develUpgrade webkitgtk4-jscUpgrade webkitgtk4 | Jun 13, 2023 | Apr 2, 2021 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Feb 19, 2021 | Feb 1, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 2, 2021 |
| Centos_linux | — | Upgrade gnome-settings-daemonUpgrade gnome-shell-extension-disable-screenshieldUpgrade mutter-debugsourceUpgrade mutterUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3-devel-debuginfoUpgrade vino-debuginfoUpgrade vino-debugsourceUpgrade vinoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gsettings-desktop-schemasUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-control-center-debugsourceUpgrade mutter-tests-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3Upgrade gsettings-desktop-schemas-develUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-debugsourceUpgrade gnome-software-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-windowsNavigatorUpgrade webkit2gtk3-jsc-develUpgrade gnome-autoar-debugsourceUpgrade gtk3-debuginfoUpgrade gdm-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade LibRaw-samples-debuginfoUpgrade gnome-control-centerUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-software-debugsourceUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-jscUpgrade gtk-update-icon-cache-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade gnome-online-accounts-develUpgrade gnome-session-wayland-sessionUpgrade gnome-shellUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gdm-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-gesture-inhibitorUpgrade LibRawUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-debugsourceUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-window-listUpgrade accountsservice-libs-debuginfoUpgrade gnome-softwareUpgrade gnome-session-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gnome-autoarUpgrade gnome-calculatorUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-online-accountsUpgrade gtk3-develUpgrade mutter-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade gtk3-devel-debuginfoUpgrade accountsservice-libsUpgrade gnome-calculator-debuginfoUpgrade accountsserviceUpgrade gnome-sessionUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-control-center-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade gtk3Upgrade gnome-shell-extension-window-grouperUpgrade gdm | Nov 10, 2021 | Apr 2, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Mar 29, 2021 | Mar 29, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | May 3, 2021 | Apr 2, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.30.6-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Apr 2, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade LibRaw-develUpgrade vinoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-session-xsessionUpgrade gnome-calculatorUpgrade gnome-shell-extension-window-grouperUpgrade accountsservice-libsUpgrade gnome-control-centerUpgrade gsettings-desktop-schemasUpgrade gnome-settings-daemonUpgrade gtk3-develUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gtk-update-icon-cacheUpgrade gnome-online-accountsUpgrade gnome-shellUpgrade gnome-autoarUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-sessionUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-control-center-filesystemUpgrade webkit2gtk3-develUpgrade gnome-softwareUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-gesture-inhibitorUpgrade webkit2gtk3-jscUpgrade gsettings-desktop-schemas-develUpgrade LibRawUpgrade gnome-classic-sessionUpgrade gtk3Upgrade accountsservice-develUpgrade webkit2gtk3Upgrade gtk3-immodule-ximUpgrade gnome-online-accounts-develUpgrade mutter-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gdmUpgrade mutterUpgrade gnome-session-wayland-sessionUpgrade gnome-session-kiosk-sessionUpgrade accountsserviceUpgrade gnome-software-devel | Nov 17, 2021 | Mar 22, 2021 |
| Redhat_linux | — | Upgrade accountsservice-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade webkit2gtk3-devel-debuginfoUpgrade vino-debuginfoUpgrade gtk3-debuginfoUpgrade webkitgtk4-debuginfoUpgrade vino-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-session-xsessionUpgrade webkitgtk4-jsc-develUpgrade gnome-online-accountsUpgrade vinoUpgrade accountsservice-libsUpgrade gtk-update-icon-cacheUpgrade gnome-autoarUpgrade gnome-online-accounts-debugsourceUpgrade gnome-session-debuginfoUpgrade gnome-calculator-debugsourceUpgrade LibRaw-develUpgrade gtk3Upgrade gnome-settings-daemonUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-drive-menuUpgrade mutter-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jscUpgrade gnome-control-center-filesystemUpgrade LibRaw-samples-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-shellUpgrade gnome-shell-extension-launch-new-instanceUpgrade mutter-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gdm-debugsourceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-window-grouperUpgrade webkit2gtk3-jsc-develUpgrade webkitgtk4-docUpgrade gnome-classic-sessionUpgrade gtk3-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkitgtk4Upgrade webkitgtk4-jscUpgrade gdmUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-calculatorUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-updates-dialogUpgrade webkit2gtk3Upgrade mutter-develUpgrade LibRaw-debugsourceUpgrade gnome-sessionUpgrade gnome-software-debuginfoUpgrade gnome-control-center-debuginfoUpgrade mutterUpgrade gnome-session-debugsourceUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-control-centerUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade accountsserviceUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-native-window-placementUpgrade LibRaw-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-autoar-debuginfoUpgrade gnome-software-debugsourceUpgrade LibRawUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-software-develUpgrade gnome-online-accounts-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade webkit2gtk3-develUpgrade accountsservice-libs-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-debuginfoNo solution existsUpgrade webkit2gtk3-debuginfoUpgrade accountsservice-develUpgrade mutter-tests-debuginfoUpgrade webkitgtk4-develUpgrade gnome-softwareUpgrade gdm-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-top-iconsUpgrade gsettings-desktop-schemasUpgrade gtk3-devel-debuginfo | Nov 10, 2021 | Apr 2, 2021 |
| Rocky_linux | — | Upgrade gnome-control-center-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-control-centerUpgrade LibRaw-debuginfoUpgrade mutterUpgrade gnome-online-accounts-debuginfoUpgrade vino-debugsourceUpgrade gnome-software-debugsourceUpgrade LibRawUpgrade mutter-develUpgrade webkit2gtk3-debugsourceUpgrade gtk3-immodule-ximUpgrade mutter-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-sessionUpgrade gnome-calculator-debugsourceUpgrade gtk3-devel-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-autoar-debugsourceUpgrade gnome-session-xsessionUpgrade webkit2gtk3Upgrade webkit2gtk3-jsc-develUpgrade gnome-session-wayland-sessionUpgrade gnome-settings-daemonUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-software-develUpgrade gdm-debuginfoUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-devel-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade accountsservice-libsUpgrade accountsserviceUpgrade gtk3Upgrade gtk3-debugsourceUpgrade gnome-calculator-debuginfoUpgrade mutter-debugsourceUpgrade gnome-online-accountsUpgrade gnome-calculatorUpgrade vinoUpgrade gtk3-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-control-center-debuginfoUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3-develUpgrade vino-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-autoarUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-develUpgrade gsettings-desktop-schemasUpgrade gdmUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shellUpgrade LibRaw-develUpgrade gnome-software-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-softwareUpgrade accountsservice-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-session-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gdm-debugsourceUpgrade accountsservice-develUpgrade LibRaw-debugsource | Mar 12, 2024 | Apr 2, 2021 |
| Suse | — | Upgrade webkit2gtk-4-1-langUpgrade typelib-1_0-javascriptcore-5_0Upgrade typelib-1_0-javascriptcore-4_1Upgrade typelib-1_0-webkit2webextension-4_1Upgrade typelib-1_0-webkit2-4_1Upgrade libwebkit2gtk-5_0-0Upgrade webkit2gtk3-develUpgrade typelib-1_0-webkit2-4_0Upgrade libwebkit2gtk-4_1-0Upgrade webkit-jsc-4Upgrade webkit2gtk-5-0-langUpgrade typelib-1_0-webkit2webextension-4_0Upgrade libwebkit2gtk3-langUpgrade typelib-1_0-webkit2-5_0Upgrade webkit2gtk-5_0-injected-bundlesUpgrade webkit2gtk3-soup2-develUpgrade webkit2gtk3-minibrowserUpgrade libjavascriptcoregtk-4_1-0Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade webkit2gtk-4_0-injected-bundlesUpgrade libwebkit2gtk-4_0-37Upgrade libjavascriptcoregtk-4_0-18Upgrade libjavascriptcoregtk-5_0-0Upgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-javascriptcore-4_0Upgrade webkit2gtk-4_1-injected-bundles | May 1, 2021 | Mar 29, 2021 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Mar 30, 2021 | Mar 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub