A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-auto-move-windowsUpgrade gsettings-desktop-schemasUpgrade gnome-session-kiosk-sessionUpgrade webkit2gtk3Upgrade gnome-control-centerUpgrade gnome-shell-extension-updates-dialogUpgrade mutterUpgrade gnome-shell-extension-apps-menuUpgrade gnome-software-develUpgrade gnome-shell-extension-window-listUpgrade gnome-softwareUpgrade gnome-sessionUpgrade LibRawUpgrade webkit2gtk3-develUpgrade mutter-develUpgrade gtk3-immodule-ximUpgrade accountsservice-develUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-session-wayland-sessionUpgrade accountsserviceUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-top-iconsUpgrade gtk3-develUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shellUpgrade gnome-shell-extension-user-themeUpgrade gnome-online-accountsUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-desktop-iconsUpgrade vinoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-settings-daemonUpgrade gnome-online-accounts-develUpgrade gtk3Upgrade gnome-shell-extension-no-hot-cornerUpgrade accountsservice-libsUpgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3-jscUpgrade gnome-autoarUpgrade gnome-shell-extension-window-grouperUpgrade gnome-control-center-filesystemUpgrade gdmUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-launch-new-instanceUpgrade LibRaw-develUpgrade gnome-shell-extension-commonUpgrade gnome-calculatorUpgrade gtk-update-icon-cache | May 4, 2022 | Jul 7, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Jul 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-jscUpgrade webkitgtk4-debuginfo | Jun 13, 2023 | Jul 7, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 7, 2021 |
| Centos_linux | — | Upgrade webkit2gtk3Upgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gtk3-develUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-desktop-iconsUpgrade LibRaw-debuginfoUpgrade gdm-debugsourceUpgrade gnome-control-centerUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-commonUpgrade accountsservice-libsUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-drive-menuUpgrade gnome-autoar-debuginfoUpgrade gtk-update-icon-cacheUpgrade gtk3-tests-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-online-accounts-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-autoar-debugsourceUpgrade gnome-control-center-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-updates-dialogUpgrade mutterUpgrade accountsservice-debuginfoUpgrade gnome-software-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-calculator-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-calculator-debuginfoUpgrade gsettings-desktop-schemasUpgrade vino-debugsourceUpgrade accountsservice-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-shell-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-control-center-filesystemUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shellUpgrade gnome-calculatorUpgrade accountsservice-libs-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-debuginfoUpgrade gnome-online-accounts-develUpgrade vinoUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-window-listUpgrade gnome-session-debugsourceUpgrade gdmUpgrade gnome-classic-sessionUpgrade gnome-softwareUpgrade mutter-debugsourceUpgrade gdm-debuginfoUpgrade accountsserviceUpgrade LibRaw-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade gnome-sessionUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-session-wayland-sessionUpgrade webkit2gtk3-jscUpgrade gtk3-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade mutter-debuginfoUpgrade webkit2gtk3-develUpgrade gtk3-immodules-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-online-accountsUpgrade gnome-autoarUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade LibRawUpgrade gtk3Upgrade gtk3-debugsourceUpgrade vino-debuginfo | Nov 10, 2021 | Jul 7, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Jul 30, 2021 | Jul 7, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Feb 2, 2022 | Jul 7, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.32.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jul 7, 2021 |
| Oracle_linux | — | Upgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-commonUpgrade vinoUpgrade gdmUpgrade gnome-online-accounts-develUpgrade gnome-calculatorUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-desktop-iconsUpgrade webkit2gtk3-jsc-develUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-control-center-filesystemUpgrade gnome-online-accountsUpgrade gnome-autoarUpgrade gnome-shellUpgrade gnome-shell-extension-places-menuUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gtk3-develUpgrade accountsservice-libsUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-dash-to-dockUpgrade LibRaw-develUpgrade gnome-shell-extension-drive-menuUpgrade gtk3Upgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-control-centerUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-session-xsessionUpgrade webkit2gtk3Upgrade LibRawUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-software-develUpgrade accountsserviceUpgrade gnome-sessionUpgrade mutterUpgrade gnome-session-wayland-sessionUpgrade accountsservice-develUpgrade webkit2gtk3-develUpgrade mutter-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-softwareUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-window-grouper | Nov 17, 2021 | Jul 28, 2021 |
| Redhat_linux | — | Upgrade gnome-shell-extension-window-listUpgrade gnome-autoarUpgrade gnome-shell-extension-horizontal-workspacesUpgrade accountsservice-develUpgrade gnome-softwareUpgrade gnome-shell-extension-disable-screenshieldUpgrade gsettings-desktop-schemasUpgrade gnome-software-debugsourceUpgrade gtk3-develUpgrade gnome-control-center-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-shell-debugsourceUpgrade gnome-software-debuginfoUpgrade webkit2gtk3-develUpgrade gnome-autoar-debugsourceUpgrade gnome-online-accountsUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade mutter-develUpgrade LibRawUpgrade gnome-autoar-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gtk3-debuginfoUpgrade gtk3-immodule-ximUpgrade mutterUpgrade gnome-classic-sessionUpgrade mutter-tests-debuginfoUpgrade webkitgtk4-jsc-develUpgrade gnome-control-centerUpgrade webkitgtk4-jscUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gnome-calculatorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade accountsservice-libs-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade webkit2gtk3-jscUpgrade webkitgtk4-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-workspace-indicatorUpgrade vino-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade vinoUpgrade LibRaw-develUpgrade mutter-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-calculator-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade gtk3-devel-debuginfoUpgrade gdmUpgrade webkitgtk4Upgrade gdm-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-calculator-debugsourceUpgrade gtk3Upgrade gnome-shellUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-desktop-iconsUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-sessionUpgrade gnome-session-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-session-xsessionUpgrade webkit2gtk3-debugsourceUpgrade webkitgtk4-develUpgrade mutter-debuginfoUpgrade webkitgtk4-docUpgrade webkit2gtk3-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade accountsservice-libsUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-drive-menuUpgrade gnome-online-accounts-debugsourceUpgrade gnome-settings-daemonUpgrade gdm-debugsourceUpgrade accountsserviceNo solution existsUpgrade gnome-software-develUpgrade gnome-shell-extension-window-grouperUpgrade LibRaw-samples-debuginfoUpgrade accountsservice-debugsourceUpgrade accountsservice-debuginfoUpgrade vino-debugsourceUpgrade gnome-online-accounts-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-places-menuUpgrade gnome-session-wayland-sessionUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-panel-favoritesUpgrade webkit2gtk3Upgrade gnome-shell-extension-systemMonitor | Nov 10, 2021 | Jul 7, 2021 |
| Rocky_linux | — | Upgrade gsettings-desktop-schemas-develUpgrade gtk-update-icon-cacheUpgrade gnome-session-xsessionUpgrade webkit2gtk3-jsc-develUpgrade gnome-calculatorUpgrade gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade LibRaw-debuginfoUpgrade accountsservice-debugsourceUpgrade webkit2gtk3Upgrade accountsserviceUpgrade gtk3Upgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-online-accounts-debugsourceUpgrade accountsservice-libsUpgrade webkit2gtk3-debuginfoUpgrade gdm-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-sessionUpgrade gtk3-debugsourceUpgrade gtk3-immodule-ximUpgrade gnome-session-debugsourceUpgrade LibRaw-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-software-debugsourceUpgrade gnome-control-center-debugsourceUpgrade vino-debugsourceUpgrade mutter-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gdmUpgrade gnome-autoar-debuginfoUpgrade vinoUpgrade LibRaw-develUpgrade gnome-shellUpgrade gnome-software-develUpgrade gnome-online-accounts-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gdm-debugsourceUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-develUpgrade gtk3-debuginfoUpgrade gtk3-develUpgrade vino-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade mutter-debugsourceUpgrade gnome-shell-debugsourceUpgrade gnome-control-centerUpgrade gnome-softwareUpgrade gnome-online-accountsUpgrade gnome-control-center-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade accountsservice-debuginfoUpgrade LibRawUpgrade gnome-autoarUpgrade gnome-autoar-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade accountsservice-develUpgrade gsettings-desktop-schemasUpgrade gnome-session-kiosk-sessionUpgrade mutter-develUpgrade mutter | May 5, 2022 | Jul 7, 2021 |
| Suse | — | Upgrade typelib-1_0-webkit2-4_0Upgrade webkit-jsc-4Upgrade typelib-1_0-javascriptcore-4_0Upgrade webkit2gtk-4_0-injected-bundlesUpgrade libjavascriptcoregtk-4_0-18Upgrade libwebkit2gtk-4_1-0Upgrade webkit2gtk3-soup2-develUpgrade webkit2gtk-5_0-injected-bundlesUpgrade libwebkit2gtk-4_0-37Upgrade libjavascriptcoregtk-4_1-0Upgrade webkit2gtk-5-0-langUpgrade libjavascriptcoregtk-5_0-0Upgrade libsoup-2_4-1Upgrade webkit2gtk-4_1-injected-bundlesUpgrade typelib-1_0-webkit2webextension-4_0Upgrade libsoup-langUpgrade typelib-1_0-webkit2-5_0Upgrade libwebkit2gtk3-langUpgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-soup-2_4Upgrade webkit2gtk-4-1-langUpgrade typelib-1_0-javascriptcore-5_0Upgrade libwebkit2gtk-5_0-0Upgrade libsoup-develUpgrade typelib-1_0-webkit2-4_1Upgrade webkit2gtk3-minibrowserUpgrade webkit2gtk3-develUpgrade typelib-1_0-javascriptcore-4_1Upgrade typelib-1_0-webkit2webextension-4_1 | Aug 4, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Jul 29, 2021 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub