A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-webkit2gtk3alma-upgrade-webkit2gtk3-develalma-upgrade-webkit2gtk3-jscalma-upgrade-webkit2gtk3-jsc-devel | May 13, 2022 | Aug 24, 2021 | |
| Alpine Linux | alpine-linux-upgrade-webkit2gtk | Aug 22, 2024 | Aug 24, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-webkitgtk4amazon-linux-ami-2-upgrade-webkitgtk4-debuginfoamazon-linux-ami-2-upgrade-webkitgtk4-develamazon-linux-ami-2-upgrade-webkitgtk4-jscamazon-linux-ami-2-upgrade-webkitgtk4-jsc-devel | Jun 13, 2023 | Aug 24, 2021 | |
| Apple Osx Webkit | apple-osx-upgrade-latest | Oct 27, 2021 | Oct 27, 2021 | |
| Apple Safari | apple-safari-upgrade-15_1apple-safari-windows-uninstall | Oct 28, 2021 | Oct 28, 2021 | |
| Centos_linux | — | centos-upgrade-webkit2gtk3centos-upgrade-webkit2gtk3-debuginfocentos-upgrade-webkit2gtk3-debugsourcecentos-upgrade-webkit2gtk3-develcentos-upgrade-webkit2gtk3-devel-debuginfocentos-upgrade-webkit2gtk3-jsccentos-upgrade-webkit2gtk3-jsc-debuginfocentos-upgrade-webkit2gtk3-jsc-develcentos-upgrade-webkit2gtk3-jsc-devel-debuginfo | May 13, 2022 | Aug 24, 2021 |
| Debian | debian-upgrade-webkit2gtkdebian-upgrade-wpewebkit | Dec 28, 2021 | Aug 24, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-webkit-gtk | Feb 2, 2022 | Aug 24, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-webkit2gtk3oracle-linux-upgrade-webkit2gtk3-develoracle-linux-upgrade-webkit2gtk3-jscoracle-linux-upgrade-webkit2gtk3-jsc-devel | May 18, 2022 | Dec 20, 2021 |
| Redhat_linux | redhat-upgrade-webkit2gtk3redhat-upgrade-webkit2gtk3-debuginforedhat-upgrade-webkit2gtk3-debugsourceredhat-upgrade-webkit2gtk3-develredhat-upgrade-webkit2gtk3-devel-debuginforedhat-upgrade-webkit2gtk3-jscredhat-upgrade-webkit2gtk3-jsc-debuginforedhat-upgrade-webkit2gtk3-jsc-develredhat-upgrade-webkit2gtk3-jsc-devel-debuginforedhat-upgrade-webkitgtk4redhat-upgrade-webkitgtk4-debuginforedhat-upgrade-webkitgtk4-develredhat-upgrade-webkitgtk4-docredhat-upgrade-webkitgtk4-jscredhat-upgrade-webkitgtk4-jsc-devel | May 13, 2022 | Aug 24, 2021 | |
| Rocky_linux | rocky-upgrade-webkit2gtk3rocky-upgrade-webkit2gtk3-debuginforocky-upgrade-webkit2gtk3-debugsourcerocky-upgrade-webkit2gtk3-develrocky-upgrade-webkit2gtk3-devel-debuginforocky-upgrade-webkit2gtk3-jscrocky-upgrade-webkit2gtk3-jsc-debuginforocky-upgrade-webkit2gtk3-jsc-develrocky-upgrade-webkit2gtk3-jsc-devel-debuginfo | May 20, 2022 | Aug 24, 2021 | |
| Suse | — | suse-upgrade-libjavascriptcoregtk-4_0-18suse-upgrade-libjavascriptcoregtk-4_0-18-32bitsuse-upgrade-libjavascriptcoregtk-4_1-0suse-upgrade-libjavascriptcoregtk-5_0-0suse-upgrade-libwebkit2gtk-4_0-37suse-upgrade-libwebkit2gtk-4_0-37-32bitsuse-upgrade-libwebkit2gtk-4_1-0suse-upgrade-libwebkit2gtk-5_0-0suse-upgrade-libwebkit2gtk3-langsuse-upgrade-typelib-1_0-javascriptcore-4_0suse-upgrade-typelib-1_0-javascriptcore-4_1suse-upgrade-typelib-1_0-javascriptcore-5_0suse-upgrade-typelib-1_0-webkit2-4_0suse-upgrade-typelib-1_0-webkit2-4_1suse-upgrade-typelib-1_0-webkit2-5_0suse-upgrade-typelib-1_0-webkit2webextension-4_0suse-upgrade-typelib-1_0-webkit2webextension-4_1suse-upgrade-webkit-jsc-4suse-upgrade-webkit2gtk-4-1-langsuse-upgrade-webkit2gtk-4_0-injected-bundlessuse-upgrade-webkit2gtk-4_1-injected-bundlessuse-upgrade-webkit2gtk-5-0-langsuse-upgrade-webkit2gtk-5_0-injected-bundlessuse-upgrade-webkit2gtk3-develsuse-upgrade-webkit2gtk3-minibrowsersuse-upgrade-webkit2gtk3-soup2-devel | Jan 21, 2022 | Aug 24, 2021 |
| Ubuntu | ubuntu-upgrade-libjavascriptcoregtk-4-0-18ubuntu-upgrade-libwebkit2gtk-4-0-37 | Jan 7, 2022 | Aug 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub