Summary
A large number of security issues were discovered in the WebKitGTK Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | webkit2gtk | 2.30.6-0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | webkit2gtk | 2.30.6-0ubuntu0.20.04.1 |
Vulnerabilities 7
-
Critical 9.8CVE-2021-1870 Exploited
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021…
KEV Nov 3, 2021 -
High 8.8
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security …
KEV May 4, 2022 -
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watc…
-
Unscored —
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This i…
-
Unscored —
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security …
-
Unscored —
A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Secu…
-
Unscored —
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security …
References
-
report
https://ubuntu.com/security/CVE-2020-27918
-
report
https://ubuntu.com/security/CVE-2020-29623
-
report
https://ubuntu.com/security/CVE-2021-1765
-
report
https://ubuntu.com/security/CVE-2021-1789
-
report
https://ubuntu.com/security/CVE-2021-1799
-
report
https://ubuntu.com/security/CVE-2021-1801
-
report
https://ubuntu.com/security/CVE-2021-1870