A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade accountsserviceUpgrade gnome-shell-extension-auto-move-windowsUpgrade LibRawUpgrade gnome-sessionUpgrade webkit2gtk3-develUpgrade gtk3-immodule-ximUpgrade gnome-session-kiosk-sessionUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-apps-menuUpgrade gsettings-desktop-schemasUpgrade gnome-control-centerUpgrade gnome-softwareUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3Upgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-updates-dialogUpgrade mutter-develUpgrade mutterUpgrade gnome-software-develUpgrade gnome-shell-extension-native-window-placementUpgrade accountsservice-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-online-accountsUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shellUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-commonUpgrade gnome-calculatorUpgrade gnome-autoarUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3-develUpgrade gnome-shell-extension-drive-menuUpgrade gtk-update-icon-cacheUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-desktop-iconsUpgrade gdmUpgrade gtk3Upgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-windowsNavigatorUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade LibRaw-develUpgrade gnome-shell-extension-window-grouperUpgrade accountsservice-libsUpgrade webkit2gtk3-jscUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-panel-favoritesUpgrade vinoUpgrade gnome-settings-daemon | May 4, 2022 | Jul 7, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Jul 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4-jscUpgrade webkitgtk4-debuginfo | Jun 13, 2023 | Jul 7, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 7, 2021 |
| Centos_linux | — | Upgrade webkit2gtk3-jsc-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-online-accountsUpgrade gtk-update-icon-cache-debuginfoUpgrade gdm-debuginfoUpgrade gnome-sessionUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-apps-menuUpgrade gsettings-desktop-schemas-develUpgrade gtk3-immodules-debuginfoUpgrade accountsserviceUpgrade gtk3-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-classic-sessionUpgrade gdmUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-gesture-inhibitorUpgrade mutter-debuginfoUpgrade gtk3-debugsourceUpgrade gtk3Upgrade gnome-control-center-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-softwareUpgrade LibRawUpgrade vinoUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3Upgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-control-centerUpgrade gnome-session-debuginfoUpgrade gdm-debugsourceUpgrade gnome-settings-daemonUpgrade gnome-shell-debugsourceUpgrade LibRaw-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-drive-menuUpgrade gnome-software-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-online-accounts-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-session-xsessionUpgrade gtk3-develUpgrade webkit2gtk3-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-updates-dialogUpgrade accountsservice-libsUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk-update-icon-cacheUpgrade mutterUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-session-kiosk-sessionUpgrade gnome-autoar-debugsourceUpgrade gnome-software-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-tests-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade accountsservice-debuginfoUpgrade accountsservice-debugsourceUpgrade gsettings-desktop-schemasUpgrade vino-debugsourceUpgrade gnome-calculatorUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shellUpgrade accountsservice-libs-debuginfoUpgrade vino-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade webkit2gtk3-debuginfoUpgrade mutter-debugsourceUpgrade gnome-autoarUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-places-menuUpgrade gnome-session-wayland-sessionUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-user-theme | Nov 10, 2021 | Jul 7, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Jul 30, 2021 | Jul 7, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Feb 2, 2022 | Jul 7, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.32.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jul 7, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shellUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-jsc-develUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-window-listUpgrade gtk3-develUpgrade LibRaw-develUpgrade gnome-shell-extension-commonUpgrade vinoUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk3Upgrade gnome-online-accountsUpgrade gnome-shell-extension-places-menuUpgrade gnome-control-center-filesystemUpgrade gnome-calculatorUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-classic-sessionUpgrade gdmUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-online-accounts-develUpgrade accountsservice-libsUpgrade gnome-autoarUpgrade gnome-control-centerUpgrade gnome-shell-extension-window-grouperUpgrade webkit2gtk3Upgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-sessionUpgrade gnome-softwareUpgrade mutterUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-apps-menuUpgrade webkit2gtk3-develUpgrade mutter-develUpgrade accountsservice-develUpgrade gsettings-desktop-schemas-develUpgrade accountsserviceUpgrade LibRawUpgrade gtk3-immodule-ximUpgrade gnome-software-develUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-top-icons | Nov 17, 2021 | Jul 28, 2021 |
| Redhat_linux | — | Upgrade webkit2gtk3-devel-debuginfoUpgrade gtk3-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gtk3Upgrade gnome-shell-extension-places-menuUpgrade gdm-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-windowsNavigatorUpgrade accountsserviceUpgrade gnome-shell-extension-commonUpgrade gnome-control-center-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-control-center-filesystemUpgrade webkitgtk4-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gdmUpgrade accountsservice-libsUpgrade webkitgtk4-docUpgrade gnome-sessionUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3Upgrade gnome-online-accounts-develUpgrade vino-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-software-develUpgrade gnome-shell-extension-user-themeUpgrade gtk-update-icon-cacheUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-updates-dialogUpgrade mutter-debuginfoUpgrade webkitgtk4Upgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade accountsservice-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-drive-menuUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-develNo solution existsUpgrade gnome-shellUpgrade gsettings-desktop-schemas-develUpgrade gnome-settings-daemonUpgrade gnome-softwareUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gtk3-immodule-ximUpgrade webkitgtk4-jsc-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-software-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gsettings-desktop-schemasUpgrade gtk3-debuginfoUpgrade gnome-autoar-debugsourceUpgrade webkit2gtk3-jscUpgrade mutter-develUpgrade mutter-tests-debuginfoUpgrade LibRaw-develUpgrade gnome-shell-extension-native-window-placementUpgrade vinoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade mutterUpgrade gnome-classic-sessionUpgrade LibRaw-debuginfoUpgrade gnome-shell-debuginfoUpgrade webkitgtk4-jscUpgrade gnome-autoarUpgrade gnome-shell-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade vino-debuginfoUpgrade gnome-online-accountsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade webkitgtk4-debuginfoUpgrade gnome-software-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-develUpgrade mutter-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-disable-screenshieldUpgrade accountsservice-develUpgrade gnome-control-centerUpgrade LibRaw-debugsourceUpgrade LibRawUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-window-listUpgrade gnome-control-center-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-calculator | Nov 10, 2021 | Jul 7, 2021 |
| Rocky_linux | — | Upgrade gnome-session-xsessionUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade gtk3Upgrade gtk3-debugsourceUpgrade gtk3-immodule-ximUpgrade mutter-debuginfoUpgrade gnome-shell-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gdm-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade LibRaw-debugsourceUpgrade LibRaw-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gtk3-devel-debuginfoUpgrade gnome-calculatorUpgrade gnome-settings-daemonUpgrade gnome-online-accounts-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade accountsservice-libsUpgrade accountsserviceUpgrade gnome-session-debugsourceUpgrade gnome-sessionUpgrade vino-debugsourceUpgrade gnome-software-debugsourceUpgrade accountsservice-debugsourceUpgrade gnome-control-center-debugsourceUpgrade webkit2gtk3Upgrade gnome-online-accounts-develUpgrade gsettings-desktop-schemas-develUpgrade gtk-update-icon-cacheUpgrade gnome-autoar-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade accountsservice-develUpgrade gnome-online-accountsUpgrade gnome-control-center-debuginfoUpgrade webkit2gtk3-develUpgrade gtk3-immodule-xim-debuginfoUpgrade LibRaw-develUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-develUpgrade gdmUpgrade gnome-online-accounts-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gdm-debugsourceUpgrade gtk3-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-software-develUpgrade gnome-shellUpgrade vinoUpgrade gnome-shell-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade vino-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade accountsservice-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-autoarUpgrade LibRawUpgrade gnome-softwareUpgrade gnome-control-centerUpgrade mutter-debugsourceUpgrade webkit2gtk3-jscUpgrade mutter-develUpgrade mutterUpgrade gsettings-desktop-schemas | May 5, 2022 | Jul 7, 2021 |
| Suse | — | Upgrade typelib-1_0-webkit2webextension-4_1Upgrade libwebkit2gtk-5_0-0Upgrade typelib-1_0-javascriptcore-4_1Upgrade webkit2gtk3-develUpgrade typelib-1_0-javascriptcore-5_0Upgrade webkit2gtk-4-1-langUpgrade typelib-1_0-webkit2-4_1Upgrade webkit2gtk3-minibrowserUpgrade libsoup-develUpgrade typelib-1_0-webkit2webextension-4_0Upgrade libsoup-langUpgrade libwebkit2gtk-4_1-0Upgrade typelib-1_0-javascriptcore-4_0Upgrade webkit2gtk-5-0-langUpgrade webkit-jsc-4Upgrade typelib-1_0-webkit2-5_0Upgrade libwebkit2gtk3-langUpgrade webkit2gtk-4_0-injected-bundlesUpgrade typelib-1_0-webkit2-4_0Upgrade libjavascriptcoregtk-5_0-0Upgrade typelib-1_0-Soup-2_4Upgrade libwebkit2gtk-4_0-37Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libjavascriptcoregtk-4_1-0Upgrade webkit2gtk3-soup2-develUpgrade webkit2gtk-4_1-injected-bundlesUpgrade libjavascriptcoregtk-4_0-18Upgrade libsoup-2_4-1Upgrade webkit2gtk-5_0-injected-bundlesUpgrade libwebkit2gtk-4_0-37-32bit | Aug 4, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Jul 29, 2021 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub