A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-native-window-placementUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-systemMonitorUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-session-wayland-sessionUpgrade gnome-software-develUpgrade gnome-shell-extension-apps-menuUpgrade webkit2gtk3Upgrade webkit2gtk3-develUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-sessionUpgrade accountsservice-develUpgrade gnome-control-centerUpgrade gnome-shell-extension-gesture-inhibitorUpgrade accountsserviceUpgrade mutterUpgrade LibRawUpgrade mutter-develUpgrade gnome-shell-extension-window-listUpgrade gnome-session-kiosk-sessionUpgrade gnome-softwareUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-horizontal-workspacesUpgrade accountsservice-libsUpgrade gnome-shell-extension-drive-menuUpgrade gtk3Upgrade gnome-session-xsessionUpgrade gnome-shell-extension-dash-to-dockUpgrade vinoUpgrade gdmUpgrade gnome-calculatorUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-places-menuUpgrade gnome-autoarUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-center-filesystemUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-commonUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-online-accountsUpgrade gnome-shell-extension-user-themeUpgrade gnome-shellUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3-jscUpgrade LibRaw-develUpgrade gtk3-develUpgrade gtk-update-icon-cache | May 4, 2022 | Jul 7, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Jul 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jscUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-develUpgrade webkitgtk4 | Jun 13, 2023 | Jul 7, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 7, 2021 |
| Centos_linux | — | Upgrade gnome-shell-extension-drive-menuUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade LibRaw-samples-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-online-accounts-debuginfoUpgrade gnome-software-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3Upgrade gtk3-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-session-debuginfoUpgrade gnome-control-centerUpgrade gdm-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-kiosk-sessionUpgrade gnome-online-accounts-debugsourceUpgrade gnome-autoar-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-debugsourceUpgrade gnome-settings-daemonUpgrade accountsservice-debugsourceUpgrade vino-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-windowsNavigatorUpgrade webkit2gtk3-devel-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-auto-move-windowsUpgrade accountsservice-libsUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsservice-debuginfoUpgrade mutterUpgrade gnome-calculator-debugsourceUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-softwareUpgrade gnome-calculatorUpgrade gnome-shellUpgrade gtk3-immodule-ximUpgrade gdmUpgrade webkit2gtk3-jsc-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-sessionUpgrade gnome-shell-extension-apps-menuUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3Upgrade gnome-control-center-debuginfoUpgrade LibRawUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-window-grouperUpgrade mutter-tests-debuginfoUpgrade vino-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-control-center-filesystemUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-places-menuUpgrade mutter-debugsourceUpgrade webkit2gtk3-develUpgrade webkit2gtk3-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-autoarUpgrade mutter-debuginfoUpgrade accountsserviceUpgrade gnome-online-accounts-develUpgrade gdm-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-online-accountsUpgrade gnome-session-debugsourceUpgrade vinoUpgrade gtk3-devel-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-window-listUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-panel-favorites | Nov 10, 2021 | Jul 7, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Jul 30, 2021 | Jul 7, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Feb 2, 2022 | Jul 7, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.32.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jul 7, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-native-window-placementUpgrade gnome-session-wayland-sessionUpgrade gnome-softwareUpgrade mutterUpgrade gnome-control-centerUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-window-grouperUpgrade accountsserviceUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-software-develUpgrade webkit2gtk3-develUpgrade gnome-sessionUpgrade mutter-develUpgrade gtk3-immodule-ximUpgrade gsettings-desktop-schemas-develUpgrade LibRawUpgrade webkit2gtk3Upgrade gnome-shell-extension-updates-dialogUpgrade accountsservice-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-apps-menuUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-places-menuUpgrade gnome-autoarUpgrade gnome-shell-extension-commonUpgrade gtk-update-icon-cacheUpgrade gtk3Upgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsservice-libsUpgrade LibRaw-develUpgrade gtk3-develUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-drive-menuUpgrade gnome-classic-sessionUpgrade gnome-calculatorUpgrade gdmUpgrade vinoUpgrade gnome-shell-extension-window-listUpgrade gnome-shellUpgrade gnome-online-accounts-develUpgrade gnome-online-accountsUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-settings-daemonUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-screenshot-window-sizer | Nov 17, 2021 | Jul 28, 2021 |
| Redhat_linux | — | Upgrade gnome-software-develUpgrade gdm-debugsourceUpgrade gnome-shell-extension-places-menuUpgrade webkitgtk4Upgrade gnome-shellUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-extension-window-grouperUpgrade gdmUpgrade gnome-shell-extension-windowsNavigatorUpgrade LibRaw-samples-debuginfoUpgrade gnome-control-center-debugsourceUpgrade accountsservice-debugsourceUpgrade mutter-debuginfoUpgrade webkitgtk4-docUpgrade gtk3-devel-debuginfoUpgrade gnome-session-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-xsessionUpgrade accountsserviceUpgrade gnome-session-wayland-sessionUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade gtk3-tests-debuginfoUpgrade gdm-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade accountsservice-libsUpgrade gnome-shell-extension-commonUpgrade gnome-session-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-online-accounts-debugsourceUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk3-immodules-debuginfoUpgrade webkit2gtk3Upgrade webkit2gtk3-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-sessionUpgrade gtk3Upgrade webkit2gtk3-jsc-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-updates-dialogUpgrade webkitgtk4-develUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade gtk3-debugsourceUpgrade vino-debugsourceUpgrade gnome-shell-extension-panel-favoritesNo solution existsUpgrade gnome-softwareUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-debugsourceUpgrade vino-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-session-kiosk-sessionUpgrade webkitgtk4-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-window-listUpgrade mutter-debugsourceUpgrade gnome-shell-extension-disable-screenshieldUpgrade LibRawUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3-develUpgrade gnome-software-debuginfoUpgrade gnome-software-debugsourceUpgrade vinoUpgrade mutter-develUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-apps-menuUpgrade LibRaw-develUpgrade gnome-calculatorUpgrade gnome-shell-extension-dash-to-dockUpgrade gtk3-immodule-xim-debuginfoUpgrade accountsservice-develUpgrade gnome-autoarUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gtk-update-icon-cache-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gnome-online-accountsUpgrade gtk3-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-calculator-debuginfoUpgrade gtk3-develUpgrade gnome-settings-daemon-debuginfoUpgrade mutter-tests-debuginfoUpgrade webkitgtk4-jscUpgrade gtk3-immodule-ximUpgrade gnome-shell-debuginfoUpgrade gnome-classic-sessionUpgrade webkitgtk4-jsc-develUpgrade gnome-control-centerUpgrade mutterUpgrade webkit2gtk3-jscUpgrade gnome-settings-daemon-debugsource | Nov 10, 2021 | Jul 7, 2021 |
| Rocky_linux | — | Upgrade gnome-shellUpgrade gtk3-debuginfoUpgrade gdm-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-software-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade vino-debuginfoUpgrade gnome-control-centerUpgrade gnome-online-accountsUpgrade accountsservice-debuginfoUpgrade gnome-shell-debugsourceUpgrade LibRawUpgrade accountsservice-develUpgrade accountsservice-libs-debuginfoUpgrade mutterUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gsettings-desktop-schemasUpgrade LibRaw-develUpgrade gtk3-develUpgrade webkit2gtk3-develUpgrade webkit2gtk3-jscUpgrade gdmUpgrade gnome-session-kiosk-sessionUpgrade gnome-autoar-debuginfoUpgrade mutter-develUpgrade gnome-control-center-debuginfoUpgrade gnome-autoarUpgrade gnome-calculator-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-session-debuginfoUpgrade vinoUpgrade mutter-debugsourceUpgrade gnome-softwareUpgrade gnome-settings-daemonUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade accountsservice-libsUpgrade accountsserviceUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade LibRaw-debuginfoUpgrade gtk-update-icon-cacheUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-xsessionUpgrade webkit2gtk3-jsc-develUpgrade gnome-calculatorUpgrade gnome-online-accounts-debugsourceUpgrade gtk3-debugsourceUpgrade webkit2gtk3Upgrade accountsservice-debugsourceUpgrade gnome-session-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade mutter-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gtk3-immodule-ximUpgrade gdm-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-sessionUpgrade gnome-control-center-debugsourceUpgrade vino-debugsourceUpgrade gnome-software-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-shell-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gtk3 | May 5, 2022 | Jul 7, 2021 |
| Suse | — | Upgrade libjavascriptcoregtk-5_0-0Upgrade typelib-1_0-webkit2-5_0Upgrade libsoup-langUpgrade typelib-1_0-webkit2webextension-4_0Upgrade libjavascriptcoregtk-4_0-18Upgrade libjavascriptcoregtk-4_1-0Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade webkit2gtk-4_1-injected-bundlesUpgrade libwebkit2gtk3-langUpgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-soup-2_4Upgrade libsoup-2_4-1Upgrade webkit2gtk-4_0-injected-bundlesUpgrade webkit2gtk3-soup2-develUpgrade typelib-1_0-webkit2-4_0Upgrade webkit2gtk-5-0-langUpgrade webkit2gtk-5_0-injected-bundlesUpgrade webkit-jsc-4Upgrade typelib-1_0-javascriptcore-4_0Upgrade libwebkit2gtk-4_0-37Upgrade libwebkit2gtk-4_1-0Upgrade webkit2gtk3-minibrowserUpgrade typelib-1_0-javascriptcore-4_1Upgrade typelib-1_0-webkit2webextension-4_1Upgrade libwebkit2gtk-5_0-0Upgrade libsoup-develUpgrade webkit2gtk3-develUpgrade typelib-1_0-webkit2-4_1Upgrade webkit2gtk-4-1-langUpgrade typelib-1_0-javascriptcore-5_0 | Aug 4, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Jul 29, 2021 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub