CVE-2021-42762

CVE-2021-42762 affects WebKitGTK and WPE WebKit up to version 2.34.0 (fixed in 2.34.1). BubblewrapLauncher.cpp can enable a limited sandbox bypass, allowing a sandboxed process to trick host processes into thinking it is not confined by the sandbox by abusing VFS syscalls that manipulate the file...

CVE-2021-42762

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact...

CVE-2021-42762

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact...

CVE-2021-42762

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact...

PT-2021-8067 · Webkitgtk +7 · Webkitgtk +7

Name of the Vulnerable Software and Affected Versions: WebKitGTK versions prior to 2.34.1 WPE WebKit versions prior to 2.34.1 Description: The issue is related to insecure privilege management in WebKitGTK and WPE WebKit, allowing a remote attacker to impact the integrity of protected information...

CVE-2021-42762: Undefined Security Weakness

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact...

WebKitGTK security vulnerabilities

WebKitGTK is a full-featured port of the WebKit rendering engine for projects that require any type of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. It provides the full functionality of WebKit for a wide range of systems from desktop computers to embedded syste...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2021-edf6957b7d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: webkit2gtk3-2.32.4-1.fc33

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

WebKitGTK Code Execution

The vulnerability of the web page rendering module in WebKitGTK-based operating systems such as Apple Mac OS, iOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

USN-5087-1 webkit2gtk vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

USN-5087-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerabilities (USN-5087-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5087-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website...

[SECURITY] Fedora 34 Update: webkit2gtk3-2.32.4-1.fc34

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

CVE-2021-30858

A flaw was found in webkitgtk. This flaw could allow an attacker to use maliciously crafted web content leading to arbitrary code execution. Mitigation This flaw can be mitigated by either disabling JavaScript or by disabling IndexedDB...

PT-2021-6066

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.8 iPadOS versions prior to 14.8 tvOS versions prior to 15 watchOS versions prior to 8 iOS versions prior to 15 iPadOS versions prior to 15 WebKitGTK affected versions not specified WPE WebKit affected versions not...

PT-2021-24247

Name of the Vulnerable Software and Affected Versions: WebKitGTK versions prior to 2.32.4 Description: The issue is related to incorrect memory allocation in the WebCore::ImageBufferCairoImageSurfaceBackend::create function, which can lead to a segmentation violation and cause the application to...

PT-2021-24249

Name of the Vulnerable Software and Affected Versions: WebKitGTK versions prior to 2.32.4 Description: The issue is related to a use-after-free in WebCore::Frame::page. Recommendations: For versions prior to 2.32.4, update to version 2.32.4 or later to resolve the issue...

PT-2021-24248

Name of the Vulnerable Software and Affected Versions: WebKitGTK versions prior to 2.32.4 Description: The issue is related to a use-after-free in WebCore::ContainerNode::firstChild. This is a different vulnerability than the one previously identified. Recommendations: For versions prior to 2.32....

PT-2021-7058

Name of the Vulnerable Software and Affected Versions Safari versions prior to 15.2 tvOS versions prior to 15.2 macOS Monterey versions prior to 12.1 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 Description A race condition was addressed with improved sta...