A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-settings-daemonUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-panel-favoritesUpgrade gdmUpgrade gtk3Upgrade gnome-autoarUpgrade vinoUpgrade gnome-online-accounts-develUpgrade gnome-shellUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-classic-sessionUpgrade gnome-calculatorUpgrade gtk-update-icon-cacheUpgrade gnome-session-xsessionUpgrade LibRaw-develUpgrade accountsservice-libsUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3-jsc-develUpgrade gnome-online-accountsUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-user-themeUpgrade gtk3-develUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3-jscUpgrade accountsservice-develUpgrade gnome-session-wayland-sessionUpgrade mutterUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-auto-move-windowsUpgrade mutter-develUpgrade gsettings-desktop-schemasUpgrade gsettings-desktop-schemas-develUpgrade LibRawUpgrade gnome-software-develUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-sessionUpgrade webkit2gtk3-develUpgrade gnome-control-centerUpgrade webkit2gtk3Upgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-session-kiosk-sessionUpgrade gnome-softwareUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-window-listUpgrade accountsservice | May 4, 2022 | Jul 7, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Jul 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jscUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-develUpgrade webkitgtk4 | Jun 13, 2023 | Jul 7, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 7, 2021 |
| Centos_linux | — | Upgrade gnome-shell-extension-desktop-iconsUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-calculator-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-control-centerUpgrade gdm-debugsourceUpgrade gnome-settings-daemonUpgrade gtk-update-icon-cacheUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-drive-menuUpgrade accountsservice-debugsourceUpgrade vino-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-auto-move-windowsUpgrade LibRaw-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-commonUpgrade accountsservice-libsUpgrade gnome-software-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-kiosk-sessionUpgrade gnome-online-accounts-debugsourceUpgrade gnome-autoar-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-horizontal-workspacesUpgrade webkit2gtk3-devel-debuginfoUpgrade mutterUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-calculator-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade LibRaw-samples-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3Upgrade gtk3-develUpgrade gdm-debuginfoUpgrade gnome-online-accountsUpgrade accountsserviceUpgrade gtk3-immodules-debuginfoUpgrade gtk3-devel-debuginfoUpgrade webkit2gtk3-develUpgrade LibRaw-debugsourceUpgrade gnome-control-center-filesystemUpgrade gnome-session-wayland-sessionUpgrade gnome-session-debugsourceUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-apps-menuUpgrade gnome-softwareUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-places-menuUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade mutter-debuginfoUpgrade mutter-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade gnome-autoarUpgrade gnome-shell-extension-workspace-indicatorUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3Upgrade gnome-control-center-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-user-themeUpgrade LibRawUpgrade vino-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade mutter-tests-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-window-grouperUpgrade gnome-calculatorUpgrade gdmUpgrade vinoUpgrade gnome-shellUpgrade gnome-classic-sessionUpgrade gnome-sessionUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gsettings-desktop-schemas-develUpgrade gnome-online-accounts-develUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-top-icons | Nov 10, 2021 | Jul 7, 2021 |
| Debian | — | Upgrade webkit2gtkUpgrade wpewebkit | Jul 30, 2021 | Jul 7, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Feb 2, 2022 | Jul 7, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.32.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jul 7, 2021 |
| Oracle_linux | — | Upgrade gnome-session-kiosk-sessionUpgrade gnome-sessionUpgrade webkit2gtk3Upgrade gnome-shell-extension-apps-menuUpgrade gnome-softwareUpgrade gsettings-desktop-schemas-develUpgrade gtk3-immodule-ximUpgrade LibRawUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-auto-move-windowsUpgrade mutterUpgrade accountsserviceUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-control-centerUpgrade gnome-software-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-session-wayland-sessionUpgrade accountsservice-develUpgrade mutter-develUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-places-menuUpgrade gnome-online-accountsUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-commonUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-jscUpgrade gtk-update-icon-cacheUpgrade gnome-control-center-filesystemUpgrade gnome-autoarUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-dash-to-dockUpgrade vinoUpgrade gnome-classic-sessionUpgrade gnome-calculatorUpgrade gdmUpgrade gnome-shell-extension-window-listUpgrade gnome-shellUpgrade gnome-online-accounts-develUpgrade gtk3-develUpgrade gsettings-desktop-schemasUpgrade LibRaw-develUpgrade gnome-shell-extension-user-themeUpgrade accountsservice-libsUpgrade gtk3Upgrade gnome-shell-extension-screenshot-window-sizer | Nov 17, 2021 | Jul 28, 2021 |
| Redhat_linux | — | Upgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-window-listUpgrade gnome-session-kiosk-sessionUpgrade webkitgtk4-debuginfoUpgrade gnome-online-accountsUpgrade mutterUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-calculator-debuginfoUpgrade gnome-softwareUpgrade accountsservice-libs-debuginfoUpgrade vino-debuginfoUpgrade gsettings-desktop-schemasUpgrade gtk-update-icon-cache-debuginfoUpgrade accountsservice-develUpgrade gtk3-develUpgrade gnome-shell-debugsourceUpgrade gnome-calculatorUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-autoar-debugsourceUpgrade gnome-control-centerUpgrade mutter-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-software-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-autoarUpgrade gnome-software-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-disable-screenshieldUpgrade LibRawUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-gesture-inhibitorUpgrade mutter-develUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade LibRaw-debuginfoUpgrade vinoUpgrade gnome-shell-extension-dash-to-dockUpgrade webkitgtk4-jscUpgrade gtk3-immodule-ximUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-classic-sessionUpgrade LibRaw-develUpgrade gnome-settings-daemon-debuginfoUpgrade webkitgtk4-jsc-develUpgrade webkit2gtk3-jscUpgrade gnome-online-accounts-develUpgrade gnome-session-wayland-sessionUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-user-themeUpgrade mutter-debuginfoUpgrade webkitgtk4-docUpgrade webkitgtk4Upgrade gnome-shell-extension-places-menuNo solution existsUpgrade LibRaw-samples-debuginfoUpgrade gdmUpgrade gnome-shellUpgrade gtk3-tests-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gdm-debuginfoUpgrade gtk3Upgrade gnome-control-center-debugsourceUpgrade gnome-control-center-filesystemUpgrade gnome-online-accounts-debugsourceUpgrade gnome-settings-daemonUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade accountsserviceUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-commonUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-software-develUpgrade webkit2gtk3-jsc-develUpgrade gdm-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade accountsservice-libsUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-sessionUpgrade accountsservice-debuginfoUpgrade vino-debugsourceUpgrade webkit2gtk3Upgrade webkit2gtk3-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-panel-favoritesUpgrade webkitgtk4-develUpgrade accountsservice-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-updates-dialog | Nov 10, 2021 | Jul 7, 2021 |
| Rocky_linux | — | Upgrade gnome-session-xsessionUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-debugsourceUpgrade gtk-update-icon-cacheUpgrade LibRaw-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade vino-debugsourceUpgrade accountsservice-libsUpgrade gnome-control-center-debugsourceUpgrade accountsserviceUpgrade gnome-software-debugsourceUpgrade webkit2gtk3Upgrade accountsservice-debugsourceUpgrade gnome-session-debugsourceUpgrade gtk3-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-calculatorUpgrade gnome-sessionUpgrade LibRaw-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gnome-shell-debuginfoUpgrade gdm-debuginfoUpgrade gnome-settings-daemonUpgrade gtk3-immodule-ximUpgrade mutter-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gtk3Upgrade LibRaw-develUpgrade gnome-shellUpgrade gnome-software-develUpgrade gnome-calculator-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-online-accountsUpgrade gnome-calculator-debugsourceUpgrade gnome-autoar-debuginfoUpgrade vinoUpgrade gnome-software-debuginfoUpgrade gdm-debugsourceUpgrade webkit2gtk3-jscUpgrade gtk3-develUpgrade gdmUpgrade mutter-develUpgrade mutterUpgrade gnome-autoar-debugsourceUpgrade gsettings-desktop-schemasUpgrade accountsservice-develUpgrade gnome-session-kiosk-sessionUpgrade accountsservice-libs-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-control-centerUpgrade mutter-debugsourceUpgrade webkit2gtk3-develUpgrade gtk-update-icon-cache-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade vino-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade accountsservice-debuginfoUpgrade LibRawUpgrade gnome-session-debuginfoUpgrade gnome-autoarUpgrade gnome-softwareUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-online-accounts-debuginfo | May 5, 2022 | Jul 7, 2021 |
| Suse | — | Upgrade webkit2gtk-4-1-langUpgrade libsoup-develUpgrade typelib-1_0-webkit2webextension-4_1Upgrade typelib-1_0-javascriptcore-4_1Upgrade libwebkit2gtk-5_0-0Upgrade typelib-1_0-javascriptcore-5_0Upgrade webkit2gtk3-minibrowserUpgrade webkit2gtk3-develUpgrade typelib-1_0-webkit2-4_1Upgrade webkit2gtk-4_1-injected-bundlesUpgrade libsoup-2_4-1Upgrade typelib-1_0-soup-2_4Upgrade webkit-jsc-4Upgrade libwebkit2gtk-4_1-0Upgrade typelib-1_0-webkit2-4_0Upgrade typelib-1_0-javascriptcore-4_0Upgrade webkit2gtk-4_0-injected-bundlesUpgrade libwebkit2gtk3-langUpgrade libwebkit2gtk-4_0-37-32bitUpgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libwebkit2gtk-4_0-37Upgrade typelib-1_0-webkit2webextension-4_0Upgrade typelib-1_0-webkit2-5_0Upgrade libjavascriptcoregtk-5_0-0Upgrade libsoup-langUpgrade libjavascriptcoregtk-4_1-0Upgrade libjavascriptcoregtk-4_0-18Upgrade webkit2gtk-5_0-injected-bundlesUpgrade webkit2gtk3-soup2-develUpgrade webkit2gtk-5-0-lang | Aug 4, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | Jul 29, 2021 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub