CVE-2021-21806

webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in remote code execution. The victim needs to visit a malicious web site to trigger the vulnerability.

CVSS 3.1 · 8.8 High EPSS 2.8% KEV · Not listed

Vendors

Redhat Webkitgtk

Products

Enterprise Linux Rhel Els Webkitgtk

CVE-2021-21779

webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution

A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 2.9% KEV · Not listed

Vendors

Debian Fedoraproject Redhat and 1 more

Products

Debian Linux Fedora Enterprise Linux and 2 more

CVE-2021-21775

webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and possibly code execution

A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.

CVSS 3.1 · 8.0 High EPSS 1.3% KEV · Not listed

Vendors

Debian Fedoraproject Redhat and 1 more

Products

Debian Linux Fedora Enterprise Linux and 2 more

CVE-2021-1801

webkitgtk: IFrame sandboxing policy violation

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Apple Fedoraproject Redhat and 1 more

Products

Ipad Os Iphone Os Macos and 6 more

CVE-2021-1799

webkitgtk: Access to restricted ports on arbitrary servers via port redirection

A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able to access restricted ports on arbitrary servers.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Apple Fedoraproject Redhat and 1 more

Products

Ipad Os Iphone Os Macos and 7 more

CVE-2021-1765

webkitgtk: IFrame sandboxing policy violation

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Apple Fedoraproject Redhat and 1 more

Products

Mac Os X Macos Fedora and 3 more

CVE-2020-3867

webkitgtk: Incorrect state management leading to universal cross-site scripting

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed

Vendors

Apple Opensuse Redhat and 1 more

Products

Icloud Ipados Iphone Os and 6 more

CVE-2020-29623

webkitgtk: User may be unable to fully delete browsing history

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete browsing history.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Apple Fedoraproject Redhat and 1 more

Products

Ipados Iphone Os Mac Os X and 6 more

CVE-2020-27918

webkitgtk: Use-after-free leading to arbitrary code execution

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 2 more

Products

Icloud Ipados Iphone Os and 10 more

CVE-2020-13753

webkitgtk: Improper access management to CLONE_NEWUSER and the TIOCSTI ioctl

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute commands outside the sandbox by writing to the controlling terminal's input buffer, similar to CVE-2017-5226.

CVSS 3.1 · 10.0 Critical EPSS 3.3% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 4 more

Products

Ubuntu Linux Debian Linux Fedora and 4 more

CVE-2020-13584

webkitgtk: use-after-free may lead to arbitrary code execution

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in a remote code execution. The victim needs to visit a malicious web site to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 4.9% KEV · Not listed

Vendors

Fedoraproject Redhat Webkitgtk

Products

Fedora Enterprise Linux Rhel Els and 1 more

CVE-2020-13558

webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed

Vendors

Redhat Webkitgtk

Products

Enterprise Linux Rhel Els Webkitgtk

CVE-2020-13543

webkitgtk: use-after-free may lead to arbitrary code execution

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 3.5% KEV · Not listed

Vendors

Redhat Webkitgtk

Products

Enterprise Linux Rhel Els Webkitgtk

CVE-2020-11793

webkitgtk: use-after-free via crafted web content

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).

CVSS 3.1 · 8.8 High EPSS 2.9% KEV · Not listed

Vendors

Canonical Fedoraproject Opensuse and 3 more

Products

Ubuntu Linux Fedora Leap and 3 more

CVE-2020-10018

webkitgtk: Use-after-free issue in accessibility/AXObjectCache.cpp

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary code execution. This issue has been fixed in 2.28.0 with improved memory handling.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 4 more

Products

Ubuntu Linux Debian Linux Fedora and 4 more

CVE-2019-8813

webkitgtk: Incorrect state management leading to universal cross-site scripting

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed

Vendors

Apple Redhat Webkitgtk

Products

Icloud Ipados Iphone Os and 5 more

CVE-2019-8764

webkitgtk: Incorrect state management leading to universal cross-site scripting

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Apple Redhat Webkitgtk

Products

Watchos Enterprise Linux Webkitgtk\+

CVE-2019-8719

webkitgtk: Incorrect state management leading to universal cross-site scripting

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed

Vendors

Apple Redhat Webkitgtk

Products

Icloud Itunes Enterprise Linux and 1 more

CVE-2019-8674

webkitgtk: Incorrect state management leading to universal cross-site scripting

A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.0% KEV · Not listed

Vendors

Apple Redhat Webkitgtk

Products

Iphone Os Safari Enterprise Linux and 1 more

CVE-2019-8625

webkitgtk: Incorrect state management leading to universal cross-site scripting

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed

Vendors

Apple Redhat Webkitgtk

Products

Icloud Itunes Enterprise Linux and 1 more