A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-online-accounts-develUpgrade gnome-shell-extension-user-themeUpgrade gtk3Upgrade gtk3-develUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-center-filesystemUpgrade LibRaw-develUpgrade vinoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-calculatorUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsservice-libsUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3-jscUpgrade gnome-autoarUpgrade gnome-shellUpgrade gdmUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-places-menuUpgrade gnome-online-accountsUpgrade gnome-shell-extension-commonUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-gesture-inhibitorUpgrade mutterUpgrade accountsserviceUpgrade gnome-shell-extension-workspace-indicatorUpgrade mutter-develUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-auto-move-windowsUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-develUpgrade gnome-session-wayland-sessionUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-control-centerUpgrade gnome-shell-extension-apps-menuUpgrade accountsservice-develUpgrade webkit2gtk3Upgrade gnome-shell-extension-updates-dialogUpgrade gnome-software-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-session-kiosk-sessionUpgrade gnome-sessionUpgrade LibRawUpgrade gnome-softwareUpgrade gnome-shell-extension-window-list | May 4, 2022 | Jul 7, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Jul 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-jscUpgrade webkitgtk4-develUpgrade webkitgtk4 | Jun 13, 2023 | Jul 7, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 7, 2021 |
| Centos_linux | — | Upgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-settings-daemonUpgrade webkit2gtk3-devel-debuginfoUpgrade gtk3-develUpgrade gdm-debugsourceUpgrade accountsservice-debuginfoUpgrade mutterUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-auto-move-windowsUpgrade accountsservice-libsUpgrade gnome-software-debugsourceUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-kiosk-sessionUpgrade gnome-online-accounts-debugsourceUpgrade gnome-autoar-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade LibRaw-samples-debuginfoUpgrade vino-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gsettings-desktop-schemasUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3Upgrade gnome-shell-extension-desktop-iconsUpgrade gnome-session-debuginfoUpgrade gnome-control-centerUpgrade gnome-session-debugsourceUpgrade gnome-shell-extension-window-listUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-workspace-indicatorUpgrade LibRawUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gdmUpgrade gnome-softwareUpgrade vino-debuginfoUpgrade gtk3Upgrade gnome-shell-extension-apps-menuUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade accountsservice-libs-debuginfoUpgrade gnome-calculatorUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shellUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-window-grouperUpgrade mutter-tests-debuginfoUpgrade gnome-sessionUpgrade gnome-online-accounts-develUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-places-menuUpgrade gtk3-immodule-ximUpgrade mutter-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gtk3-debuginfoUpgrade gnome-online-accountsUpgrade vinoUpgrade gnome-control-center-filesystemUpgrade gnome-session-wayland-sessionUpgrade gnome-autoarUpgrade gtk3-immodule-xim-debuginfoUpgrade LibRaw-debugsourceUpgrade webkit2gtk3-develUpgrade mutter-debugsourceUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-control-center-debuginfoUpgrade accountsserviceUpgrade gtk3-devel-debuginfoUpgrade gdm-debuginfo | Nov 10, 2021 | Jul 7, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Jul 30, 2021 | Jul 7, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Feb 2, 2022 | Jul 7, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.32.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jul 7, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3Upgrade accountsservice-libsUpgrade gnome-autoarUpgrade gnome-classic-sessionUpgrade gnome-online-accounts-develUpgrade gnome-calculatorUpgrade gnome-shellUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-commonUpgrade gnome-control-center-filesystemUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-jsc-develUpgrade vinoUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-windowsNavigatorUpgrade gdmUpgrade gnome-shell-extension-disable-screenshieldUpgrade gsettings-desktop-schemasUpgrade gtk3-develUpgrade gnome-shell-extension-drive-menuUpgrade LibRaw-develUpgrade gnome-settings-daemonUpgrade gnome-online-accountsUpgrade gnome-shell-extension-places-menuUpgrade gnome-session-wayland-sessionUpgrade gnome-software-develUpgrade accountsserviceUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-apps-menuUpgrade mutterUpgrade gnome-softwareUpgrade gnome-session-kiosk-sessionUpgrade gnome-control-centerUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-sessionUpgrade LibRawUpgrade gtk3-immodule-ximUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3Upgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-native-window-placementUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade accountsservice-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-window-grouperUpgrade mutter-develUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-gesture-inhibitor | Nov 17, 2021 | Jul 28, 2021 |
| Redhat_linux | — | Upgrade webkitgtk4-jscUpgrade gnome-softwareUpgrade gnome-autoar-debuginfoUpgrade LibRawUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-control-centerUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkitgtk4-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-window-listUpgrade webkit2gtk3-develUpgrade accountsservice-develUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gtk3-develUpgrade gnome-calculator-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-calculatorUpgrade LibRaw-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade vino-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade mutter-debugsourceUpgrade mutter-develUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-native-window-placementUpgrade gtk3-debuginfoUpgrade gnome-autoarUpgrade gnome-online-accountsUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade accountsservice-libs-debuginfoUpgrade gnome-autoar-debugsourceUpgrade LibRaw-develUpgrade vinoUpgrade LibRaw-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gtk-update-icon-cache-debuginfoUpgrade webkitgtk4-jsc-develUpgrade gtk3-immodule-ximUpgrade gnome-software-debugsourceUpgrade webkit2gtk3-jscUpgrade mutterUpgrade gnome-classic-sessionUpgrade mutter-tests-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-extension-window-grouperUpgrade gdm-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-control-center-debugsourceUpgrade accountsservice-debuginfoUpgrade webkitgtk4-docUpgrade gdmUpgrade gnome-shellUpgrade gnome-control-center-filesystemNo solution existsUpgrade gtk3-devel-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gtk-update-icon-cacheUpgrade accountsservice-debugsourceUpgrade vino-debugsourceUpgrade gnome-session-debugsourceUpgrade gtk3Upgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-updates-dialogUpgrade webkit2gtk3-jsc-develUpgrade webkitgtk4Upgrade gtk3-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-software-develUpgrade mutter-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-sessionUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade accountsservice-libsUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-session-wayland-sessionUpgrade gdm-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade webkit2gtk3Upgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-session-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsserviceUpgrade gnome-shell-extension-commonUpgrade gnome-session-xsessionUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade webkitgtk4-develUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-windowsNavigator | Nov 10, 2021 | Jul 7, 2021 |
| Rocky_linux | — | Upgrade gnome-session-xsessionUpgrade gnome-calculatorUpgrade gnome-settings-daemonUpgrade accountsservice-debugsourceUpgrade gtk-update-icon-cacheUpgrade accountsserviceUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gtk3Upgrade gnome-control-center-debugsourceUpgrade gnome-sessionUpgrade gtk3-devel-debuginfoUpgrade gdm-debuginfoUpgrade mutter-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-session-debugsourceUpgrade gnome-session-wayland-sessionUpgrade webkit2gtk3-debuginfoUpgrade gtk3-debugsourceUpgrade webkit2gtk3Upgrade gtk3-immodule-ximUpgrade gnome-software-debugsourceUpgrade accountsservice-libsUpgrade webkit2gtk3-debugsourceUpgrade vino-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade LibRaw-debuginfoUpgrade webkit2gtk3-develUpgrade webkit2gtk3-jscUpgrade gsettings-desktop-schemasUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-online-accountsUpgrade gnome-control-center-debuginfoUpgrade gtk3-develUpgrade gnome-softwareUpgrade LibRawUpgrade gdmUpgrade gnome-autoarUpgrade gnome-session-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-debugsourceUpgrade mutter-debugsourceUpgrade gnome-control-centerUpgrade gnome-autoar-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-calculator-debugsourceUpgrade vinoUpgrade gnome-session-kiosk-sessionUpgrade gnome-settings-daemon-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade vino-debuginfoUpgrade accountsservice-debuginfoUpgrade gdm-debugsourceUpgrade gtk3-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-software-develUpgrade gnome-shellUpgrade gnome-autoar-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade accountsservice-develUpgrade mutter-develUpgrade mutterUpgrade LibRaw-devel | May 5, 2022 | Jul 7, 2021 |
| Suse | — | Upgrade libwebkit2gtk-5_0-0Upgrade typelib-1_0-webkit2webextension-4_1Upgrade typelib-1_0-webkit2-4_1Upgrade webkit2gtk3-develUpgrade webkit2gtk3-minibrowserUpgrade typelib-1_0-javascriptcore-5_0Upgrade libsoup-develUpgrade typelib-1_0-javascriptcore-4_1Upgrade webkit2gtk-4-1-langUpgrade webkit2gtk3-soup2-develUpgrade webkit2gtk-5_0-injected-bundlesUpgrade libwebkit2gtk-4_0-37-32bitUpgrade libsoup-2_4-1Upgrade webkit2gtk-4_0-injected-bundlesUpgrade typelib-1_0-Soup-2_4Upgrade typelib-1_0-webkit2webextension-4_0Upgrade typelib-1_0-webkit2-5_0Upgrade libjavascriptcoregtk-5_0-0Upgrade typelib-1_0-javascriptcore-4_0Upgrade libsoup-langUpgrade libwebkit2gtk-4_0-37Upgrade webkit2gtk-5-0-langUpgrade libjavascriptcoregtk-4_1-0Upgrade webkit-jsc-4Upgrade typelib-1_0-webkit2-4_0Upgrade libjavascriptcoregtk-4_0-18Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libwebkit2gtk3-langUpgrade libwebkit2gtk-4_1-0Upgrade webkit2gtk-4_1-injected-bundles | Aug 4, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Jul 29, 2021 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub