PT-2021-5827

CVE-2021-21779

·

تاريخ النشر

2021-02-12

·

تاريخ التحديث

2026-10-31

الوصف من

CVSS 3.1
8.8
عالية
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WebKitGTK version 2.30.4
Description A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events. This can lead to a potential information leak and further memory corruption when a victim visits a specially crafted web page. The vulnerability can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations For WebKitGTK version 2.30.4, update to a version with improved memory management to address the use-after-free issue. As a temporary workaround, consider restricting access to potentially malicious web pages to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALSA-2021:4381
ALT-PU-2021-1311
CESA-2021_4381
CLEANSTART-2024-BK79030
DSA-4945-1
MGASA-2021-0400
OPENSUSE-SU-2021:1101-1
OPENSUSE-SU-2021_1101-1
OPENSUSE-SU-2021:2598-1
OPENSUSE-SU-2021_2598-1
RHSA-2021:4381
RHSA-2021_4381
RHSA-2025:10364
RLSA-2021:4381
SUSE-SU-2021:2598-1
SUSE-SU-2021:2600-1
SUSE-SU-2021:2762-1
USN-5024-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾