A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-sessionUpgrade gtk3Upgrade gnome-shell-extension-horizontal-workspacesUpgrade accountsserviceUpgrade gnome-shell-extension-workspace-indicatorUpgrade webkit2gtk3-develUpgrade gnome-shellUpgrade accountsservice-libsUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-settings-daemonUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-places-menuUpgrade gtk-update-icon-cacheUpgrade gdmUpgrade gtk3-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-xsessionUpgrade webkit2gtk3Upgrade gnome-online-accounts-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-autoarUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-desktop-iconsUpgrade accountsservice-develUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-calculatorUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-window-grouperUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-classic-sessionUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade vinoUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-apps-menuUpgrade gnome-online-accountsUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-commonUpgrade gnome-session-kiosk-sessionUpgrade mutter-develUpgrade LibRaw-develUpgrade gsettings-desktop-schemasUpgrade gnome-control-centerUpgrade gnome-softwareUpgrade mutterUpgrade LibRawUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-software-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-dash-to-dock | May 4, 2022 | Jul 8, 2021 |
| Alpine Linux | — | Upgrade webkit2gtk | Aug 22, 2024 | Jul 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-jscUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfo | Jun 13, 2023 | Jul 8, 2021 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Aug 23, 2021 | Jul 8, 2021 |
| Apple Safari | — | Upgrade to Apple Safari version 14.1.1Uninstall Apple Safari on Windows | May 25, 2021 | May 25, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 8, 2021 |
| Centos_linux | — | Upgrade gnome-calculatorUpgrade LibRaw-debugsourceUpgrade mutterUpgrade gnome-session-kiosk-sessionUpgrade gtk3-immodules-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-control-center-debuginfoUpgrade LibRawUpgrade gnome-shell-extension-window-listUpgrade gnome-session-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gsettings-desktop-schemasUpgrade gtk-update-icon-cache-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-classic-sessionUpgrade gtk3-debuginfoUpgrade gnome-softwareUpgrade gnome-control-centerUpgrade gnome-sessionUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gdm-debugsourceUpgrade gnome-software-debugsourceUpgrade gtk3-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade vinoUpgrade gnome-shell-extension-auto-move-windowsUpgrade webkit2gtk3-develUpgrade LibRaw-debuginfoUpgrade gnome-online-accountsUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-calculator-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-horizontal-workspacesUpgrade accountsservice-libs-debuginfoUpgrade gnome-autoarUpgrade gtk3-devel-debuginfoUpgrade gdmUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade vino-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-window-grouperUpgrade gnome-autoar-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3-immodule-ximUpgrade gnome-shellUpgrade gnome-shell-extension-updates-dialogUpgrade gdm-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3Upgrade gnome-calculator-debugsourceUpgrade accountsservice-debugsourceUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-session-xsessionUpgrade gnome-session-wayland-sessionUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-commonUpgrade gnome-online-accounts-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemonUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade gnome-control-center-filesystemUpgrade gsettings-desktop-schemas-develUpgrade gtk3Upgrade gnome-control-center-debugsourceUpgrade accountsserviceUpgrade mutter-debugsourceUpgrade mutter-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3-tests-debuginfoUpgrade vino-debugsourceUpgrade accountsservice-libsUpgrade gtk-update-icon-cache | Nov 10, 2021 | Jul 8, 2021 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Jul 30, 2021 | Jul 8, 2021 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Feb 2, 2022 | Jul 8, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.32.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jul 8, 2021 |
| Oracle_linux | — | Upgrade gnome-classic-sessionUpgrade gnome-shell-extension-places-menuUpgrade gdmUpgrade mutter-develUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-window-listUpgrade gtk3Upgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-autoarUpgrade gnome-software-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade mutterUpgrade gnome-shell-extension-top-iconsUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3Upgrade gnome-softwareUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-gesture-inhibitorUpgrade webkit2gtk3-jscUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-native-window-placementUpgrade LibRawUpgrade accountsservice-develUpgrade gnome-shell-extension-updates-dialogUpgrade gsettings-desktop-schemas-develUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-drive-menuUpgrade LibRaw-develUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-commonUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3-develUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-desktop-iconsUpgrade accountsserviceUpgrade vinoUpgrade accountsservice-libsUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-sessionUpgrade gnome-calculatorUpgrade gnome-shellUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-online-accountsUpgrade gnome-control-centerUpgrade gnome-shell-extension-dash-to-dockUpgrade gsettings-desktop-schemasUpgrade gnome-settings-daemon | Nov 17, 2021 | Jul 28, 2021 |
| Redhat_linux | — | Upgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-immodule-ximUpgrade LibRaw-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shellUpgrade gnome-autoar-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-online-accounts-develNo solution existsUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-drive-menuUpgrade gnome-control-center-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade vinoUpgrade mutter-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkitgtk4-jscUpgrade mutter-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-jsc-develUpgrade gtk3-immodules-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade webkitgtk4-docUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-software-develUpgrade accountsservice-debugsourceUpgrade webkitgtk4-develUpgrade webkit2gtk3-debugsourceUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-systemMonitorUpgrade gtk3-debuginfoUpgrade webkit2gtk3-jscUpgrade gdm-debugsourceUpgrade vino-debugsourceUpgrade mutter-tests-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-places-menuUpgrade webkitgtk4Upgrade gtk-update-icon-cache-debuginfoUpgrade gsettings-desktop-schemasUpgrade gdmUpgrade vino-debuginfoUpgrade webkit2gtk3Upgrade gnome-online-accounts-debuginfoUpgrade gnome-classic-sessionUpgrade LibRaw-samples-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-calculatorUpgrade gnome-shell-extension-user-themeUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-session-debugsourceUpgrade gdm-debuginfoUpgrade webkitgtk4-jsc-develUpgrade gtk3Upgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gtk3-debugsourceUpgrade LibRaw-debugsourceUpgrade accountsservice-libsUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk3-develUpgrade gnome-control-center-filesystemUpgrade mutter-debuginfoUpgrade gnome-softwareUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-session-wayland-sessionUpgrade accountsservice-develUpgrade LibRawUpgrade accountsserviceUpgrade gtk-update-icon-cacheUpgrade gtk3-devel-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade webkit2gtk3-develUpgrade gnome-online-accountsUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-desktop-iconsUpgrade webkitgtk4-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gnome-sessionUpgrade gnome-control-centerUpgrade gnome-session-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-software-debugsourceUpgrade accountsservice-debuginfoUpgrade mutterUpgrade gnome-autoar | Nov 10, 2021 | Jul 8, 2021 |
| Rocky_linux | — | Upgrade gnome-calculator-debugsourceUpgrade gnome-session-xsessionUpgrade gtk3-develUpgrade webkit2gtk3-devel-debuginfoUpgrade accountsservice-libsUpgrade gtk3-immodule-xim-debuginfoUpgrade LibRaw-develUpgrade mutter-debuginfoUpgrade vino-debuginfoUpgrade gdmUpgrade mutter-develUpgrade gtk-update-icon-cacheUpgrade gnome-shellUpgrade gtk3Upgrade vinoUpgrade webkit2gtk3-jscUpgrade gnome-settings-daemonUpgrade gtk-update-icon-cache-debuginfoUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-calculator-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade vino-debugsourceUpgrade gnome-session-debuginfoUpgrade mutter-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade gtk3-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-online-accountsUpgrade gnome-autoarUpgrade gnome-online-accounts-debugsourceUpgrade gnome-calculatorUpgrade gnome-sessionUpgrade gnome-session-debugsourceUpgrade gnome-shell-debuginfoUpgrade gtk3-immodule-ximUpgrade gtk3-devel-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-settings-daemon-debuginfoUpgrade LibRawUpgrade gnome-software-debugsourceUpgrade gnome-shell-debugsourceUpgrade mutterUpgrade gsettings-desktop-schemas-develUpgrade accountsservice-develUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-autoar-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade accountsservice-debuginfoUpgrade webkit2gtk3-develUpgrade gnome-online-accounts-debuginfoUpgrade accountsserviceUpgrade webkit2gtk3Upgrade gdm-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-control-center-debuginfoUpgrade gnome-control-centerUpgrade webkit2gtk3-debuginfoUpgrade gnome-software-develUpgrade gnome-software-debuginfoUpgrade gnome-softwareUpgrade gnome-session-kiosk-sessionUpgrade gnome-control-center-debugsourceUpgrade LibRaw-debuginfoUpgrade gnome-autoar-debugsource | May 5, 2022 | Jul 8, 2021 |
| Suse | — | Upgrade libsoup-langUpgrade webkit2gtk3-develUpgrade libwebkit2gtk-4_0-37Upgrade typelib-1_0-soup-2_4Upgrade libsoup-develUpgrade typelib-1_0-webkit2-5_0Upgrade typelib-1_0-javascriptcore-4_0Upgrade webkit2gtk-4-1-langUpgrade libwebkit2gtk-5_0-0Upgrade typelib-1_0-webkit2webextension-4_1Upgrade typelib-1_0-javascriptcore-4_1Upgrade webkit2gtk-4_0-injected-bundlesUpgrade webkit2gtk3-minibrowserUpgrade webkit-jsc-4Upgrade libsoup-2_4-1Upgrade typelib-1_0-webkit2webextension-4_0Upgrade typelib-1_0-webkit2-4_0Upgrade libwebkit2gtk-4_1-0Upgrade webkit2gtk3-soup2-develUpgrade libjavascriptcoregtk-5_0-0Upgrade webkit2gtk-5-0-langUpgrade webkit2gtk-5_0-injected-bundlesUpgrade libwebkit2gtk-4_0-37-32bitUpgrade libjavascriptcoregtk-4_1-0Upgrade libjavascriptcoregtk-4_0-18Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade webkit2gtk-4_1-injected-bundlesUpgrade typelib-1_0-webkit2-4_1Upgrade typelib-1_0-javascriptcore-5_0Upgrade libwebkit2gtk3-lang | Aug 4, 2021 | Jul 8, 2021 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Jul 29, 2021 | Jul 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub