Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2021-1870

critical

CVE-2021-1870

webkitgtk: Logic issue leading to arbitrary code execution

Published Modified
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Amazon (high), Red Hat (medium), AlmaLinux (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).

Description

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Affected packages and fixed versions

SourcePackageFixed in
alma 8LibRaw, LibRaw-devel, accountsservice and 53 more0.19.5-3.el8 and 16 more
alpine 3.13webkit2gtk2.30.6-r0
alpine 3.14webkit2gtk2.30.6-r0
alpine 3.15webkit2gtk2.30.6-r0
alpine 3.16webkit2gtk2.30.6-r0
alpine 3.17webkit2gtk2.30.6-r0
alpine 3.18webkit2gtk2.30.6-r0
alpine 3.19webkit2gtk2.30.6-r0
alpine 3.20webkit2gtk2.30.6-r0
amazon linux 2webkitgtk4, webkitgtk4-debuginfo, webkitgtk4-devel and 2 more2.38.5-3.amzn2.0.1
debian 10webkit2gtk2.30.6-1~deb10u1
debian 11webkit2gtk, wpewebkit2.30.6-1
Show all 210 entries from 32 sources
SourcePackageFixed in
alma 8LibRaw0.19.5-3.el8
alma 8LibRaw-devel0.19.5-3.el8
alma 8accountsservice0.6.55-2.el8
alma 8accountsservice-devel0.6.55-2.el8
alma 8accountsservice-libs0.6.55-2.el8
alma 8gdm1:40.0-15.el8
alma 8gnome-autoar0.2.3-2.el8
alma 8gnome-calculator3.28.2-2.el8
alma 8gnome-classic-session3.32.1-20.el8
alma 8gnome-control-center3.28.2-28.el8
alma 8gnome-control-center-filesystem3.28.2-28.el8
alma 8gnome-online-accounts3.28.2-3.el8
alma 8gnome-online-accounts-devel3.28.2-3.el8
alma 8gnome-session3.28.1-13.el8
alma 8gnome-session-kiosk-session3.28.1-13.el8
alma 8gnome-session-wayland-session3.28.1-13.el8
alma 8gnome-session-xsession3.28.1-13.el8
alma 8gnome-settings-daemon3.32.0-16.el8.alma
alma 8gnome-shell3.32.2-40.el8
alma 8gnome-shell-extension-apps-menu3.32.1-20.el8
alma 8gnome-shell-extension-auto-move-windows3.32.1-20.el8
alma 8gnome-shell-extension-common3.32.1-20.el8
alma 8gnome-shell-extension-dash-to-dock3.32.1-20.el8
alma 8gnome-shell-extension-desktop-icons3.32.1-20.el8
alma 8gnome-shell-extension-disable-screenshield3.32.1-20.el8
alma 8gnome-shell-extension-drive-menu3.32.1-20.el8
alma 8gnome-shell-extension-gesture-inhibitor3.32.1-20.el8
alma 8gnome-shell-extension-horizontal-workspaces3.32.1-20.el8
alma 8gnome-shell-extension-launch-new-instance3.32.1-20.el8
alma 8gnome-shell-extension-native-window-placement3.32.1-20.el8
alma 8gnome-shell-extension-no-hot-corner3.32.1-20.el8
alma 8gnome-shell-extension-panel-favorites3.32.1-20.el8
alma 8gnome-shell-extension-places-menu3.32.1-20.el8
alma 8gnome-shell-extension-screenshot-window-sizer3.32.1-20.el8
alma 8gnome-shell-extension-systemMonitor3.32.1-20.el8
alma 8gnome-shell-extension-top-icons3.32.1-20.el8
alma 8gnome-shell-extension-updates-dialog3.32.1-20.el8
alma 8gnome-shell-extension-user-theme3.32.1-20.el8
alma 8gnome-shell-extension-window-grouper3.32.1-20.el8
alma 8gnome-shell-extension-window-list3.32.1-20.el8
alma 8gnome-shell-extension-windowsNavigator3.32.1-20.el8
alma 8gnome-shell-extension-workspace-indicator3.32.1-20.el8
alma 8gnome-software3.36.1-10.el8
alma 8gnome-software-devel3.36.1-10.el8
alma 8gsettings-desktop-schemas-devel3.32.0-6.el8
alma 8gtk-update-icon-cache3.22.30-8.el8
alma 8gtk33.22.30-8.el8
alma 8gtk3-devel3.22.30-8.el8
alma 8gtk3-immodule-xim3.22.30-8.el8
alma 8mutter3.32.2-60.el8
alma 8mutter-devel3.32.2-60.el8
alma 8vino3.22.0-11.el8
alma 8webkit2gtk32.32.3-2.el8
alma 8webkit2gtk3-devel2.32.3-2.el8
alma 8webkit2gtk3-jsc2.32.3-2.el8
alma 8webkit2gtk3-jsc-devel2.32.3-2.el8
alpine 3.13webkit2gtk2.30.6-r0
alpine 3.14webkit2gtk2.30.6-r0
alpine 3.15webkit2gtk2.30.6-r0
alpine 3.16webkit2gtk2.30.6-r0
alpine 3.17webkit2gtk2.30.6-r0
alpine 3.18webkit2gtk2.30.6-r0
alpine 3.19webkit2gtk2.30.6-r0
alpine 3.20webkit2gtk2.30.6-r0
amazon linux 2webkitgtk42.38.5-3.amzn2.0.1
amazon linux 2webkitgtk4-debuginfo2.38.5-3.amzn2.0.1
amazon linux 2webkitgtk4-devel2.38.5-3.amzn2.0.1
amazon linux 2webkitgtk4-jsc2.38.5-3.amzn2.0.1
amazon linux 2webkitgtk4-jsc-devel2.38.5-3.amzn2.0.1
debian 10webkit2gtk2.30.6-1~deb10u1
debian 11webkit2gtk2.30.6-1
debian 11wpewebkit2.30.6-1
debian 12webkit2gtk2.30.6-1
debian 12wpewebkit2.30.6-1
debian 13webkit2gtk2.30.6-1
debian 13wpewebkit2.30.6-1
debian 14webkit2gtk2.30.6-1
debian 14wpewebkit2.30.6-1
debian 9webkit2gtkno fix listed
echowebkit2gtk2.30.6-1
echowpewebkit2.30.6-1
Oracle Linux 8LibRaw0.19.5-3.el8
Oracle Linux 8LibRaw-devel0.19.5-3.el8
Oracle Linux 8accountsservice0.6.55-2.el8
Oracle Linux 8accountsservice-devel0.6.55-2.el8
Oracle Linux 8accountsservice-libs0.6.55-2.el8
Oracle Linux 8gdm1:40.0-15.el8
Oracle Linux 8gnome-autoar0.2.3-2.el8
Oracle Linux 8gnome-calculator3.28.2-2.el8
Oracle Linux 8gnome-classic-session3.32.1-20.el8
Oracle Linux 8gnome-control-center3.28.2-28.el8
Oracle Linux 8gnome-control-center-filesystem3.28.2-28.el8
Oracle Linux 8gnome-online-accounts3.28.2-3.el8
Oracle Linux 8gnome-online-accounts-devel3.28.2-3.el8
Oracle Linux 8gnome-session3.28.1-13.0.1.el8
Oracle Linux 8gnome-session-kiosk-session3.28.1-13.0.1.el8
Oracle Linux 8gnome-session-wayland-session3.28.1-13.0.1.el8
Oracle Linux 8gnome-session-xsession3.28.1-13.0.1.el8
Oracle Linux 8gnome-settings-daemon3.32.0-16.el8
Oracle Linux 8gnome-shell3.32.2-40.el8
Oracle Linux 8gnome-shell-extension-apps-menu3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-auto-move-windows3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-common3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-dash-to-dock3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-desktop-icons3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-disable-screenshield3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-drive-menu3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-gesture-inhibitor3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-horizontal-workspaces3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-launch-new-instance3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-native-window-placement3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-no-hot-corner3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-panel-favorites3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-places-menu3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-screenshot-window-sizer3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-systemMonitor3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-top-icons3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-updates-dialog3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-user-theme3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-window-grouper3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-window-list3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-windowsNavigator3.32.1-20.el8
Oracle Linux 8gnome-shell-extension-workspace-indicator3.32.1-20.el8
Oracle Linux 8gnome-software3.36.1-10.el8
Oracle Linux 8gnome-software-devel3.36.1-10.el8
Oracle Linux 8gsettings-desktop-schemas3.32.0-6.el8
Oracle Linux 8gsettings-desktop-schemas-devel3.32.0-6.el8
Oracle Linux 8gtk-update-icon-cache3.22.30-8.el8
Oracle Linux 8gtk33.22.30-8.el8
Oracle Linux 8gtk3-devel3.22.30-8.el8
Oracle Linux 8gtk3-immodule-xim3.22.30-8.el8
Oracle Linux 8mutter3.32.2-60.el8
Oracle Linux 8mutter-devel3.32.2-60.el8
Oracle Linux 8vino3.22.0-11.el8
Oracle Linux 8webkit2gtk32.32.3-2.el8
Oracle Linux 8webkit2gtk3-devel2.32.3-2.el8
Oracle Linux 8webkit2gtk3-jsc2.32.3-2.el8
Oracle Linux 8webkit2gtk3-jsc-devel2.32.3-2.el8
Red Hatlibwebkit2gtkno fix listed
Red Hatwebkitgtkno fix listed
Red Hatwebkitgtk-develno fix listed
Red Hatwebkitgtk-docno fix listed
Red Hatwebkitgtk3no fix listed
Red Hatwebkitgtk3-develno fix listed
Red Hatwebkitgtk3-docno fix listed
rocky 8LibRaw0.19.5-3.el8
rocky 8accountsservice0.6.55-2.el8
rocky 8accountsservice-libs0.6.55-2.el8
rocky 8gdm1:40.0-15.el8
rocky 8gnome-autoar0.2.3-2.el8
rocky 8gnome-calculator3.28.2-2.el8
rocky 8gnome-classic-session3.32.1-20.el8
rocky 8gnome-control-center3.28.2-28.el8
rocky 8gnome-control-center-filesystem3.28.2-28.el8
rocky 8gnome-online-accounts3.28.2-3.el8
rocky 8gnome-online-accounts-devel3.28.2-3.el8
rocky 8gnome-session3.28.1-13.el8
rocky 8gnome-session-kiosk-session3.28.1-13.el8
rocky 8gnome-session-wayland-session3.28.1-13.el8
rocky 8gnome-session-xsession3.28.1-13.el8
rocky 8gnome-settings-daemon3.32.0-16.el8_6.1
rocky 8gnome-shell3.32.2-40.el8
rocky 8gnome-shell-extension-apps-menu3.32.1-20.el8
rocky 8gnome-shell-extension-auto-move-windows3.32.1-20.el8
rocky 8gnome-shell-extension-common3.32.1-20.el8
rocky 8gnome-shell-extension-dash-to-dock3.32.1-20.el8
rocky 8gnome-shell-extension-desktop-icons3.32.1-20.el8
rocky 8gnome-shell-extension-disable-screenshield3.32.1-20.el8
rocky 8gnome-shell-extension-drive-menu3.32.1-20.el8
rocky 8gnome-shell-extension-gesture-inhibitor3.32.1-20.el8
rocky 8gnome-shell-extension-horizontal-workspaces3.32.1-20.el8
rocky 8gnome-shell-extension-launch-new-instance3.32.1-20.el8
rocky 8gnome-shell-extension-native-window-placement3.32.1-20.el8
rocky 8gnome-shell-extension-no-hot-corner3.32.1-20.el8
rocky 8gnome-shell-extension-panel-favorites3.32.1-20.el8
rocky 8gnome-shell-extension-places-menu3.32.1-20.el8
rocky 8gnome-shell-extension-screenshot-window-sizer3.32.1-20.el8
rocky 8gnome-shell-extension-systemMonitor3.32.1-20.el8
rocky 8gnome-shell-extension-top-icons3.32.1-20.el8
rocky 8gnome-shell-extension-updates-dialog3.32.1-20.el8
rocky 8gnome-shell-extension-user-theme3.32.1-20.el8
rocky 8gnome-shell-extension-window-grouper3.32.1-20.el8
rocky 8gnome-shell-extension-window-list3.32.1-20.el8
rocky 8gnome-shell-extension-windowsNavigator3.32.1-20.el8
rocky 8gnome-shell-extension-workspace-indicator3.32.1-20.el8
rocky 8gnome-software3.36.1-10.el8
rocky 8gsettings-desktop-schemas3.32.0-6.el8
rocky 8gsettings-desktop-schemas-devel3.32.0-6.el8
rocky 8gtk-update-icon-cache3.22.30-8.el8
rocky 8gtk33.22.30-8.el8
rocky 8gtk3-devel3.22.30-8.el8
rocky 8gtk3-immodule-xim3.22.30-8.el8
rocky 8mutter3.32.2-60.el8
rocky 8vino3.22.0-11.el8
rocky 8webkit2gtk32.32.3-2.el8
rocky 8webkit2gtk3-devel2.32.3-2.el8
rocky 8webkit2gtk3-jsc2.32.3-2.el8
rocky 8webkit2gtk3-jsc-devel2.32.3-2.el8
ubuntu 18.04webkit2gtk2.30.6-0ubuntu0.18.04.1
ubuntu 18.04-ESMwebkit2gtk2.30.6-0ubuntu0.18.04.1
ubuntu 20.04webkit2gtk2.30.6-0ubuntu0.20.04.1
ubuntu 20.04-ESMwebkit2gtk2.30.6-0ubuntu0.20.04.1
ubuntu 20.10webkit2gtk2.30.6-0ubuntu0.20.10.1
ubuntu 21.04webkit2gtk2.32.0-1ubuntu3
ubuntu 21.10webkit2gtk2.32.0-1ubuntu3
ubuntu 22.04webkit2gtk2.32.0-1ubuntu3
ubuntu 22.10webkit2gtk2.32.0-1ubuntu3
ubuntu 23.04webkit2gtk2.32.0-1ubuntu3
ubuntu 23.10webkit2gtk2.32.0-1ubuntu3
ubuntu 24.04webkit2gtk2.32.0-1ubuntu3

References

All 113 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.