Lucene search
Veracode Vulnerability DatabaseVERACODE:29859HistoryMar 30, 2021 - 9:26 p.m.
Remote Code Execution (RCE)
2021-03-3021:26:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
36
webkit2gtk
remote code execution
iframe sandboxing
EPSS
0.003
Percentile
70.9%
webkit2gtk is vulnerable to remote code execution. Maliciously crafted web content may violate iframe sandboxing policy. This issue was addressed with improved iframe sandbox enforcement.
Affected configurations
Node
-webkit2gtk\Match3.132.30.5-r0
OR-webkit2gtk\Matchedge2.28.0-r0
OR-webkit2gtk\Matchedge2.30.5-r0
OR-webkit2gtk\Matchedge2.26.4-r3
OR-webkit2gtk\Matchedge2.28.0-r2
OR-webkit2gtk\Matchedge2.28.1-r0
OR-webkit2gtk\Matchedge2.28.2-r0
OR-webkit2gtk\Matchedge2.28.0-r1
ORgnomegnome-autoarMatch0.2.3_1.el8
ORgnomegnome-shellMatch3.32.2_20.el8
ORgnomegnome-shellMatch3.32.2_39.el8
ORgnomegnome-shellMatch3.32.2_21.el8
ORgnomegnome-shellMatch3.32.2_24.el8
ORgnomegnome-shellMatch3.32.2_16.el8
ORgnomegnome-shellMatch3.32.2_36.el8
ORgnomegnome-shellMatch3.32.2_30.el8
ORgnomegnome-shellMatch3.32.2_9.el8
ORgnomegnome-shellMatch3.32.2_14.el8
ORgnomegnome-shellMatch3.32.2_29.el8
ORgnomegnome-shellMatch3.32.2_34.el8
ORgnomegnome-shellMatch3.32.2_38.el8
ORgnomegnome-shellMatch3.32.2_33.el8
ORgnomegnome-shellMatch3.32.2_27.el8
ORgnomegnome-shellMatch3.32.2_35.el8
ORgnomegnome-shellMatch3.32.2_19.el8
ORgnomegnome-shellMatch3.28.3_10.el8
ORgdmMatch3.28.3_35.el8
ORgdmMatch40.0_3.el8
ORgdmMatch40.0_13.el8
ORgdmMatch40.0_12.el8
ORgdmMatch3.28.3_37.el8
ORgdmMatch3.28.3_29.el8
ORgdmMatch3.28.3_22.el8
ORgdmMatch40.0_2.el8
ORgdmMatch3.28.3_39.el8
ORgdmMatch3.28.3_34.el8
ORgdmMatch3.28.3_20.el8
OR-gsettings-desktop-schemasMatch3.32.0_3.el8
OR-gsettings-desktop-schemasMatch3.28.1_1.el8
OR-gsettings-desktop-schemasMatch3.32.0_4.el8
OR-gsettings-desktop-schemasMatch3.32.0_5.el8
OR-webkit2gtk3Match2.22.6_1.el8
ORgnomegnome-sessionMatch3.28.1_6.el8
ORgnomegnome-sessionMatch3.28.1_10.el8
ORgnomegnome-sessionMatch3.28.1_9.el8
ORgnomegnome-sessionMatch3.28.1_8.el8
ORgnomegnome-sessionMatch3.28.1_7.el8_1
ORgnomegnome-sessionMatch3.28.1_10.el8_4.1
ORlibrawlibrawMatch0.19.5_2.el8
ORlibrawlibrawMatch0.19.5_1.el8
ORlibrawlibrawMatch0.19.1_1.el8
ORgnomecontrol_centerMatch3.28.2_24.el8
ORgnomecontrol_centerMatch3.28.2_26.el8
ORgnomecontrol_centerMatch3.28.2_4.el8
ORgnomecontrol_centerMatch3.28.2_19.el8
ORgnomecontrol_centerMatch3.28.2_27.el8
ORgnomecontrol_centerMatch3.28.2_5.el8
ORgnomecontrol_centerMatch3.28.2_22.el8
ORgnomecontrol_centerMatch3.28.2_21.el8
OR-mutterMatch3.28.3_19.el8_0
OR-mutterMatch3.32.2_11.el8_1
OR-mutterMatch3.32.2_51.el8
OR-mutterMatch3.32.2_49.el8
OR-mutterMatch3.32.2_48.el8
OR-mutterMatch3.32.2_55.el8
OR-mutterMatch3.32.2_36.el8
OR-mutterMatch3.32.2_47.el8
OR-mutterMatch3.32.2_57.el8
OR-mutterMatch3.32.2_53.el8
OR-mutterMatch3.32.2_10.el8
OR-mutterMatch3.32.2_34.el8
OR-mutterMatch3.32.2_12.el8_1
OR-mutterMatch3.32.2_36.el8_2
OR-mutterMatch3.32.2_45.el8
OR-mutterMatch3.28.3_18.el8
OR-mutterMatch3.32.2_50.el8
OR-mutterMatch3.32.2_37.el8
OR-mutterMatch3.32.2_35.el8_2
OR-mutterMatch3.32.2_54.el8
OR-vinoMatch3.22.0_10.el8
OR-gtk3Match3.22.30_6.el8
OR-gtk3Match3.22.30_4.el8
OR-gtk3Match3.22.30_5.el8
OR-gtk3Match3.22.30_3.el8
ORgnomegnome_online_accountsMatch3.28.0_1.el8
ORgnomegnome_online_accountsMatch3.28.2_1.el8
ORgnomegnome_online_accountsMatch3.28.2_2.el8
OR-accountsserviceMatch0.6.50_7.el8
OR-accountsserviceMatch0.6.50_8.el8
OR-accountsserviceMatch0.6.55_1.el8
OR-accountsserviceMatch0.6.50_6.el8
OR-gnome-calculatorMatch3.28.2_1.el8
ORgnomelibgtop_daemonMatch3.32.0_15.el8
ORgnomelibgtop_daemonMatch3.32.0_14.el8
ORgnomelibgtop_daemonMatch3.32.0_9.el8
ORgnomelibgtop_daemonMatch3.28.1_2.el8
ORgnomelibgtop_daemonMatch3.32.0_11.el8
ORgnomelibgtop_daemonMatch3.32.0_4.el8
ORgnomelibgtop_daemonMatch3.32.0_9.el8.0.1
ORgnomelibgtop_daemonMatch3.32.0_12.el8
ORgnomelibgtop_daemonMatch3.32.0_13.el8
OR-gnome-softwareMatch3.36.1_8.el8
OR-gnome-softwareMatch3.30.6_1.el8
OR-gnome-softwareMatch3.36.1_5.el8
OR-gnome-softwareMatch3.36.1_4.el8
OR-gnome-softwareMatch3.30.6_2.el8
OR-gnome-softwareMatch3.30.6_3.el8
OR-gnome-softwareMatch3.36.1_9.el8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | webkit2gtk\ | 3.13 | cpe:2.3:a:-:webkit2gtk\:3.13:2.30.5-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.0-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.30.5-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.26.4-r3:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.0-r2:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.1-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.2-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.0-r1:*:*:*:*:*:*:* |
| gnome | gnome-autoar | 0.2.3_1.el8 | cpe:2.3:a:gnome:gnome-autoar:0.2.3_1.el8:*:*:*:*:*:*:* |
| gnome | gnome-shell | 3.32.2_20.el8 | cpe:2.3:a:gnome:gnome-shell:3.32.2_20.el8:*:*:*:*:*:*:* |
References
lists.fedoraproject.org/archives/list/[email protected]/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/
lists.fedoraproject.org/archives/list/[email protected]/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/
secdb.alpinelinux.org/v3.13/community.yaml
security.gentoo.org/glsa/202104-03
support.apple.com/en-us/HT212146
support.apple.com/en-us/HT212147
support.apple.com/en-us/HT212148
support.apple.com/en-us/HT212149
Related
cvelist
cvelist
CVE-2021-1801
2021-04-02 18:05:56
cve
cve
CVE-2021-1801
2021-04-02 19:15:19
ubuntucve
ubuntucve
CVE-2021-1801
2021-03-24 00:00:00
debiancve
debiancve
CVE-2021-1801
2021-04-02 19:15:19
malwarebytes
malwarebytes
A week in security (February 15 – February 21)
2021-02-22 11:37:19
nvd
nvd
CVE-2021-1801
2021-04-02 19:15:19
threatpost
threatpost
Details Tied to Safari Browser-based 'ScamClub' Campaign Revealed
2021-02-17 15:30:37
redhatcve
redhatcve
CVE-2021-1801
2021-03-29 19:15:14
thn
thn
Malvertisers Exploited WebKit 0-Day to Redirect Browser Users to Scam Sites
2021-02-17 07:11:00
prion
prion
Code injection
2021-04-02 19:15:00
alpinelinux
alpinelinux
CVE-2021-1801
2021-04-02 19:15:19
fedora
fedora
[SECURITY] Fedora 32 Update: webkit2gtk3-2.30.6-1.fc32
2021-04-11 14:02:06
[SECURITY] Fedora 33 Update: webkit2gtk3-2.32.0-1.fc33
2021-04-04 01:09:35
[SECURITY] Fedora 34 Update: webkit2gtk3-2.32.0-1.fc34
2021-03-29 00:18:51
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerabilities (USN-4894-1)
2021-04-21 00:00:00
Fedora 32 : webkit2gtk3 (2021-619711d709)
2021-04-19 00:00:00
Debian DSA-4877-1 : webkit2gtk - security update
2021-03-30 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4894-1)
2021-03-30 00:00:00
Fedora: Security Advisory for webkit2gtk3 (FEDORA-2021-619711d709)
2021-04-12 00:00:00
Debian: Security Advisory (DSA-4877-1)
2021-03-30 00:00:00
ubuntu
ubuntu
WebKitGTK vulnerabilities
2021-03-29 00:00:00
debian
debian
[SECURITY] [DSA 4877-1] webkit2gtk security update
2021-03-27 06:41:31
[SECURITY] [DSA 4877-1] webkit2gtk security update
2021-03-27 06:41:31
osv
osv
webkit2gtk vulnerabilities
2021-03-29 12:57:55
webkit2gtk - security update
2021-03-27 00:00:00
Moderate: GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
archlinux
archlinux
[ASA-202103-24] webkit2gtk: multiple issues
2021-03-25 00:00:00
[ASA-202103-25] wpewebkit: multiple issues
2021-03-25 00:00:00
gentoo
gentoo
WebkitGTK+: Multiple vulnerabilities
2021-04-30 00:00:00
suse
suse
Security update for webkit2gtk3 (important)
2021-05-01 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2021-04-12 22:59:59
oraclelinux
oraclelinux
GNOME security, bug fix, and enhancement update
2021-11-16 00:00:00
redhat
redhat
almalinux
almalinux
Moderate: GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
rocky
rocky
GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
apple
apple
About the security content of tvOS 14.4 - Apple Support
2021-02-01 06:39:19
About the security content of watchOS 7.3 - Apple Support
2021-02-01 06:39:19
About the security content of tvOS 14.4
2021-01-26 00:00:00
amazon
amazon
Important: webkitgtk4
2023-06-07 23:52:00
Important: webkitgtk4
2023-06-07 23:52:00
ibm
ibm