Vulnerability-Lookup

RHSA-2022:1777

Vulnerability from csaf_redhat - Published: 2022-05-10 13:27 - Updated: 2026-03-06 03:17

Summary

Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update

Severity

Moderate

Notes

Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have been upgraded to a later upstream version: webkit2gtk3 (2.34.6). (BZ#1985042) Security Fix(es): * webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free (CVE-2022-22620) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-30809) * webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-30818) * webkitgtk: Logic issue leading to HSTS bypass (CVE-2021-30823) * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30846) * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30848) * webkitgtk: Multiple memory corruption issue leading to arbitrary code execution (CVE-2021-30849) * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30851) * webkitgtk: Logic issue leading to Content Security Policy bypass (CVE-2021-30887) * webkitgtk: Information leak via Content Security Policy reports (CVE-2021-30888) * webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2021-30889) * webkitgtk: Logic issue leading to universal cross-site scripting (CVE-2021-30890) * webkitgtk: Cross-origin data exfiltration via resource timing API (CVE-2021-30897) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30934) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30936) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30951) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30952) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30953) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30954) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30984) * webkitgtk: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create (CVE-2021-45481) * webkitgtk: use-after-free in WebCore::ContainerNode::firstChild (CVE-2021-45482) * webkitgtk: use-after-free in WebCore::Frame::page (CVE-2021-45483) * webkitgtk: Processing a maliciously crafted mail message may lead to running arbitrary javascript (CVE-2022-22589) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2022-22590) * webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2022-22592) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2022-22594) * webkitgtk: logic issue was addressed with improved state management (CVE-2022-22637) * webkitgtk: Out-of-bounds read leading to memory disclosure (CVE-2021-30836) * webkitgtk: CSS compositing issue leading to revealing of the browsing history (CVE-2021-30884) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2021-30809

A use-after-free flaw was found in WebKitGTK. Specially crafted web content could use this flaw to trigger an arbitrary code execution when processed.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30818

A confusion type flaw was found in WebKitGTK. Specially crafted web content could use this flaw to trigger an arbitrary code execution when processed.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30823

A logic issue was found in WebKitGTK. An attacker in a privileged network position could use this flaw to bypass HSTS.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30836

An out-of-bounds read flaw was found in WebKitGTK. A specially crafted audio file could use this flaw to trigger a disclosure of memory when processed.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2021-30846

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30848

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30849

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30851

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30884

A flaw was found in the way WebKitGTK performed CSS compositing. A malicious web site could possibly use this flaw to reveal user's browsing history.

4.7 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2021-30887

A logic issue was found in WebKitGTK. A specially crafted web content could use this flaw to bypass Content Security Policy bypass when processed.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30888

An information leak flaw was found in WebKitGTK. A malicious web site using Content Security Policy reports could use this flaw to leak information via redirects.

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30889

A buffer overflow flaw was found in WebKitGTK. Specially crafted web content could use this flaw to trigger an arbitrary code execution when processed.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30890

A logic issue was found in WebKitGTK. Specially crafted web content could use this flaw to trigger a universal cross-site scripting when processed.

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30897

A flaw was found in the resource timing API specification and its implementation in WebKitGTK. A malicious web site could use this flaw to trigger a cross-domain data exfiltration.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30934

A buffer overflow vulnerability was found in webkitgtk. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash or lead to arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30936

A use after free vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30951

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30952

A flaw was found in webkitgtk. The vulnerability occurs due to improper input validation, which can lead to an integer overflow. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Moderate

CVE-2021-30953

A flaw was found in webkitgtk. The vulnerability occurs due to improper bounds checking, which can lead to an out-of-bounds read vulnerability. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30954

A flaw was found in webkitgtk. The vulnerability occurs due to improper memory handling, which can lead to a type confusion issue. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-30984

A flaw was found in webkitgtk. The vulnerability occurs due to improper state handling, which can lead to a race condition. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-45481

A segmentation violation vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted HTML files causing an application to halt or crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-45482

A use-after-free vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted HTML files causing an application to halt or crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2021-45483

A use-after-free vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted HTML files causing an application to halt or crash.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-22589

A vulnerability was found in WebKitGTK. The vulnerability exists due to improper input validation in WebKit when processing email messages. This flaw allows a remote attacker to trick the victim into opening a specially crafted email message and execute arbitrary JavaScript code.

7.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

CWE-1173 - Improper Use of Validation Framework

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-22590

A use-after-free vulnerability was found in WebKitGTK. The vulnerability occurs when processing HTML content in WebKit. This flaw allows a remote attacker to trick the victim into opening a specially crafted web page, trigger a use-after-free error and execute arbitrary code on the system.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-22592

A vulnerability was found in WebKitGTK. The flaw exists due to a logic issue when processing HTML content in WebKit. This flaw allows a remote attacker to create a specially crafted web page, trick the victim into visiting it, and prevent the Content Security Policy from being enforced, allowing the remote attacker to bypass implemented security restrictions.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-22594

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-22620

A use-after-free vulnerability was found in WebKitGTK. The vulnerability occurs when processing HTML content in WebKit. This flaw allows a remote attacker to trick the victim into opening a specially crafted web page, triggering a use-after-free error and leading to the execution of arbitrary code on the system.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Moderate

CVE-2022-22637

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

References

161 references

URL	Category
https://access.redhat.com/errata/RHSA-2022:1777	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1985042	external
https://bugzilla.redhat.com/show_bug.cgi?id=2017898	external
https://bugzilla.redhat.com/show_bug.cgi?id=2017901	external
https://bugzilla.redhat.com/show_bug.cgi?id=2017904	external
https://bugzilla.redhat.com/show_bug.cgi?id=2018573	external
https://bugzilla.redhat.com/show_bug.cgi?id=2034347	external
https://bugzilla.redhat.com/show_bug.cgi?id=2034368	external
https://bugzilla.redhat.com/show_bug.cgi?id=2034373	external
https://bugzilla.redhat.com/show_bug.cgi?id=2034376	external
https://bugzilla.redhat.com/show_bug.cgi?id=2034378	external
https://bugzilla.redhat.com/show_bug.cgi?id=2034381	external
https://bugzilla.redhat.com/show_bug.cgi?id=2034383	external
https://bugzilla.redhat.com/show_bug.cgi?id=2034386	external
https://bugzilla.redhat.com/show_bug.cgi?id=2034389	external
https://bugzilla.redhat.com/show_bug.cgi?id=2038907	external
https://bugzilla.redhat.com/show_bug.cgi?id=2040327	external
https://bugzilla.redhat.com/show_bug.cgi?id=2040329	external
https://bugzilla.redhat.com/show_bug.cgi?id=2040331	external
https://bugzilla.redhat.com/show_bug.cgi?id=2041559	external
https://bugzilla.redhat.com/show_bug.cgi?id=2044521	external
https://bugzilla.redhat.com/show_bug.cgi?id=2044528	external
https://bugzilla.redhat.com/show_bug.cgi?id=2044534	external
https://bugzilla.redhat.com/show_bug.cgi?id=2044538	external
https://bugzilla.redhat.com/show_bug.cgi?id=2044542	external
https://bugzilla.redhat.com/show_bug.cgi?id=2044551	external
https://bugzilla.redhat.com/show_bug.cgi?id=2044553	external
https://bugzilla.redhat.com/show_bug.cgi?id=2045291	external
https://bugzilla.redhat.com/show_bug.cgi?id=2053179	external
https://bugzilla.redhat.com/show_bug.cgi?id=2053181	external
https://bugzilla.redhat.com/show_bug.cgi?id=2053185	external
https://bugzilla.redhat.com/show_bug.cgi?id=2056474	external
https://bugzilla.redhat.com/show_bug.cgi?id=2073903	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2021-30809	self
https://bugzilla.redhat.com/show_bug.cgi?id=2034347	external
https://www.cve.org/CVERecord?id=CVE-2021-30809	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30809	external
https://access.redhat.com/security/cve/CVE-2021-30818	self
https://bugzilla.redhat.com/show_bug.cgi?id=2034368	external
https://www.cve.org/CVERecord?id=CVE-2021-30818	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30818	external
https://access.redhat.com/security/cve/CVE-2021-30823	self
https://bugzilla.redhat.com/show_bug.cgi?id=2034373	external
https://www.cve.org/CVERecord?id=CVE-2021-30823	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30823	external
https://access.redhat.com/security/cve/CVE-2021-30836	self
https://bugzilla.redhat.com/show_bug.cgi?id=2034376	external
https://www.cve.org/CVERecord?id=CVE-2021-30836	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30836	external
https://access.redhat.com/security/cve/CVE-2021-30846	self
https://bugzilla.redhat.com/show_bug.cgi?id=2017898	external
https://www.cve.org/CVERecord?id=CVE-2021-30846	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30846	external
https://webkitgtk.org/security/WSA-2021-0006.html	external
https://access.redhat.com/security/cve/CVE-2021-30848	self
https://bugzilla.redhat.com/show_bug.cgi?id=2017901	external
https://www.cve.org/CVERecord?id=CVE-2021-30848	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30848	external
https://access.redhat.com/security/cve/CVE-2021-30849	self
https://bugzilla.redhat.com/show_bug.cgi?id=2017904	external
https://www.cve.org/CVERecord?id=CVE-2021-30849	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30849	external
https://access.redhat.com/security/cve/CVE-2021-30851	self
https://bugzilla.redhat.com/show_bug.cgi?id=2018573	external
https://www.cve.org/CVERecord?id=CVE-2021-30851	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30851	external
https://access.redhat.com/security/cve/CVE-2021-30884	self
https://bugzilla.redhat.com/show_bug.cgi?id=2034378	external
https://www.cve.org/CVERecord?id=CVE-2021-30884	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30884	external
https://access.redhat.com/security/cve/CVE-2021-30887	self
https://bugzilla.redhat.com/show_bug.cgi?id=2034381	external
https://www.cve.org/CVERecord?id=CVE-2021-30887	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30887	external
https://access.redhat.com/security/cve/CVE-2021-30888	self
https://bugzilla.redhat.com/show_bug.cgi?id=2034383	external
https://www.cve.org/CVERecord?id=CVE-2021-30888	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30888	external
https://access.redhat.com/security/cve/CVE-2021-30889	self
https://bugzilla.redhat.com/show_bug.cgi?id=2034386	external
https://www.cve.org/CVERecord?id=CVE-2021-30889	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30889	external
https://access.redhat.com/security/cve/CVE-2021-30890	self
https://bugzilla.redhat.com/show_bug.cgi?id=2034389	external
https://www.cve.org/CVERecord?id=CVE-2021-30890	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30890	external
https://access.redhat.com/security/cve/CVE-2021-30897	self
https://bugzilla.redhat.com/show_bug.cgi?id=2038907	external
https://www.cve.org/CVERecord?id=CVE-2021-30897	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30897	external
https://access.redhat.com/security/cve/CVE-2021-30934	self
https://bugzilla.redhat.com/show_bug.cgi?id=2044521	external
https://www.cve.org/CVERecord?id=CVE-2021-30934	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30934	external
https://access.redhat.com/security/cve/CVE-2021-30936	self
https://bugzilla.redhat.com/show_bug.cgi?id=2044528	external
https://www.cve.org/CVERecord?id=CVE-2021-30936	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30936	external
https://webkitgtk.org/security/WSA-2022-0001.html	external
https://access.redhat.com/security/cve/CVE-2021-30951	self
https://bugzilla.redhat.com/show_bug.cgi?id=2044534	external
https://www.cve.org/CVERecord?id=CVE-2021-30951	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30951	external
https://access.redhat.com/security/cve/CVE-2021-30952	self
https://bugzilla.redhat.com/show_bug.cgi?id=2044538	external
https://www.cve.org/CVERecord?id=CVE-2021-30952	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30952	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2021-30953	self
https://bugzilla.redhat.com/show_bug.cgi?id=2044542	external
https://www.cve.org/CVERecord?id=CVE-2021-30953	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30953	external
https://access.redhat.com/security/cve/CVE-2021-30954	self
https://bugzilla.redhat.com/show_bug.cgi?id=2044551	external
https://www.cve.org/CVERecord?id=CVE-2021-30954	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30954	external
https://access.redhat.com/security/cve/CVE-2021-30984	self
https://bugzilla.redhat.com/show_bug.cgi?id=2044553	external
https://www.cve.org/CVERecord?id=CVE-2021-30984	external
https://nvd.nist.gov/vuln/detail/CVE-2021-30984	external
https://access.redhat.com/security/cve/CVE-2021-45481	self
https://bugzilla.redhat.com/show_bug.cgi?id=2040327	external
https://www.cve.org/CVERecord?id=CVE-2021-45481	external
https://nvd.nist.gov/vuln/detail/CVE-2021-45481	external
https://access.redhat.com/security/cve/CVE-2021-45482	self
https://bugzilla.redhat.com/show_bug.cgi?id=2040329	external
https://www.cve.org/CVERecord?id=CVE-2021-45482	external
https://nvd.nist.gov/vuln/detail/CVE-2021-45482	external
https://access.redhat.com/security/cve/CVE-2021-45483	self
https://bugzilla.redhat.com/show_bug.cgi?id=2040331	external
https://www.cve.org/CVERecord?id=CVE-2021-45483	external
https://nvd.nist.gov/vuln/detail/CVE-2021-45483	external
https://access.redhat.com/security/cve/CVE-2022-22589	self
https://bugzilla.redhat.com/show_bug.cgi?id=2053179	external
https://www.cve.org/CVERecord?id=CVE-2022-22589	external
https://nvd.nist.gov/vuln/detail/CVE-2022-22589	external
https://webkitgtk.org/security/WSA-2022-0002.html	external
https://access.redhat.com/security/cve/CVE-2022-22590	self
https://bugzilla.redhat.com/show_bug.cgi?id=2053181	external
https://www.cve.org/CVERecord?id=CVE-2022-22590	external
https://nvd.nist.gov/vuln/detail/CVE-2022-22590	external
https://access.redhat.com/security/cve/CVE-2022-22592	self
https://bugzilla.redhat.com/show_bug.cgi?id=2053185	external
https://www.cve.org/CVERecord?id=CVE-2022-22592	external
https://nvd.nist.gov/vuln/detail/CVE-2022-22592	external
https://access.redhat.com/security/cve/CVE-2022-22594	self
https://bugzilla.redhat.com/show_bug.cgi?id=2045291	external
https://www.cve.org/CVERecord?id=CVE-2022-22594	external
https://nvd.nist.gov/vuln/detail/CVE-2022-22594	external
https://access.redhat.com/security/cve/CVE-2022-22620	self
https://bugzilla.redhat.com/show_bug.cgi?id=2056474	external
https://www.cve.org/CVERecord?id=CVE-2022-22620	external
https://nvd.nist.gov/vuln/detail/CVE-2022-22620	external
https://webkitgtk.org/security/WSA-2022-0003.html	external
https://access.redhat.com/security/cve/CVE-2022-22637	self
https://bugzilla.redhat.com/show_bug.cgi?id=2073903	external
https://www.cve.org/CVERecord?id=CVE-2022-22637	external
https://nvd.nist.gov/vuln/detail/CVE-2022-22637	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have been upgraded to a later upstream version: webkit2gtk3 (2.34.6). (BZ#1985042)\n\nSecurity Fix(es):\n\n* webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free (CVE-2022-22620)\n\n* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-30809)\n\n* webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-30818)\n\n* webkitgtk: Logic issue leading to HSTS bypass (CVE-2021-30823)\n\n* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30846)\n\n* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30848)\n\n* webkitgtk: Multiple memory corruption issue leading to arbitrary code execution (CVE-2021-30849)\n\n* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-30851)\n\n* webkitgtk: Logic issue leading to Content Security Policy bypass (CVE-2021-30887)\n\n* webkitgtk: Information leak via Content Security Policy reports (CVE-2021-30888)\n\n* webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2021-30889)\n\n* webkitgtk: Logic issue leading to universal cross-site scripting (CVE-2021-30890)\n\n* webkitgtk: Cross-origin data exfiltration via resource timing API (CVE-2021-30897)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30934)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30936)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30951)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30952)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30953)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30954)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2021-30984)\n\n* webkitgtk: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create (CVE-2021-45481)\n\n* webkitgtk: use-after-free in WebCore::ContainerNode::firstChild (CVE-2021-45482)\n\n* webkitgtk: use-after-free in WebCore::Frame::page (CVE-2021-45483)\n\n* webkitgtk: Processing a maliciously crafted mail message may lead to running arbitrary javascript (CVE-2022-22589)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2022-22590)\n\n* webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2022-22592)\n\n* webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2022-22594)\n\n* webkitgtk: logic issue was addressed with improved state management (CVE-2022-22637)\n\n* webkitgtk: Out-of-bounds read leading to memory disclosure (CVE-2021-30836)\n\n* webkitgtk: CSS compositing issue leading to revealing of the browsing history (CVE-2021-30884)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:1777",
        "url": "https://access.redhat.com/errata/RHSA-2022:1777"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/"
      },
      {
        "category": "external",
        "summary": "1985042",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1985042"
      },
      {
        "category": "external",
        "summary": "2017898",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2017898"
      },
      {
        "category": "external",
        "summary": "2017901",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2017901"
      },
      {
        "category": "external",
        "summary": "2017904",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2017904"
      },
      {
        "category": "external",
        "summary": "2018573",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2018573"
      },
      {
        "category": "external",
        "summary": "2034347",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034347"
      },
      {
        "category": "external",
        "summary": "2034368",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034368"
      },
      {
        "category": "external",
        "summary": "2034373",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034373"
      },
      {
        "category": "external",
        "summary": "2034376",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034376"
      },
      {
        "category": "external",
        "summary": "2034378",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034378"
      },
      {
        "category": "external",
        "summary": "2034381",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034381"
      },
      {
        "category": "external",
        "summary": "2034383",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034383"
      },
      {
        "category": "external",
        "summary": "2034386",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034386"
      },
      {
        "category": "external",
        "summary": "2034389",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034389"
      },
      {
        "category": "external",
        "summary": "2038907",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2038907"
      },
      {
        "category": "external",
        "summary": "2040327",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2040327"
      },
      {
        "category": "external",
        "summary": "2040329",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2040329"
      },
      {
        "category": "external",
        "summary": "2040331",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2040331"
      },
      {
        "category": "external",
        "summary": "2041559",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041559"
      },
      {
        "category": "external",
        "summary": "2044521",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044521"
      },
      {
        "category": "external",
        "summary": "2044528",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044528"
      },
      {
        "category": "external",
        "summary": "2044534",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044534"
      },
      {
        "category": "external",
        "summary": "2044538",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044538"
      },
      {
        "category": "external",
        "summary": "2044542",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044542"
      },
      {
        "category": "external",
        "summary": "2044551",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044551"
      },
      {
        "category": "external",
        "summary": "2044553",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044553"
      },
      {
        "category": "external",
        "summary": "2045291",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2045291"
      },
      {
        "category": "external",
        "summary": "2053179",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053179"
      },
      {
        "category": "external",
        "summary": "2053181",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053181"
      },
      {
        "category": "external",
        "summary": "2053185",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053185"
      },
      {
        "category": "external",
        "summary": "2056474",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056474"
      },
      {
        "category": "external",
        "summary": "2073903",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2073903"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1777.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2026-03-06T03:17:14+00:00",
      "generator": {
        "date": "2026-03-06T03:17:14+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.2"
        }
      },
      "id": "RHSA-2022:1777",
      "initial_release_date": "2022-05-10T13:27:07+00:00",
      "revision_history": [
        {
          "date": "2022-05-10T13:27:07+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-05-10T13:27:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-06T03:17:14+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.6.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.34.6-1.el8.src",
                "product": {
                  "name": "webkit2gtk3-0:2.34.6-1.el8.src",
                  "product_id": "webkit2gtk3-0:2.34.6-1.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.34.6-1.el8?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.34.6-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-0:2.34.6-1.el8.aarch64",
                  "product_id": "webkit2gtk3-0:2.34.6-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.34.6-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
                  "product_id": "webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.34.6-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
                  "product_id": "webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.34.6-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.34.6-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
                  "product_id": "webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.34.6-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.34.6-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.34.6-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.34.6-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.34.6-1.el8?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.34.6-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-0:2.34.6-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-0:2.34.6-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.34.6-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.34.6-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.34.6-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.34.6-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.34.6-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.34.6-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.34.6-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.34.6-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.34.6-1.el8?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.34.6-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.34.6-1.el8.i686",
                  "product_id": "webkit2gtk3-0:2.34.6-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.34.6-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.34.6-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.34.6-1.el8.i686",
                  "product_id": "webkit2gtk3-devel-0:2.34.6-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.34.6-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.34.6-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.34.6-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.34.6-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.34.6-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.34.6-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.34.6-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.34.6-1.el8?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.34.6-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.34.6-1.el8.x86_64",
                  "product_id": "webkit2gtk3-0:2.34.6-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.34.6-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.34.6-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.34.6-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.34.6-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.34.6-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.34.6-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.34.6-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.34.6-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.34.6-1.el8?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.34.6-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-0:2.34.6-1.el8.s390x",
                  "product_id": "webkit2gtk3-0:2.34.6-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.34.6-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
                  "product_id": "webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.34.6-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
                  "product_id": "webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.34.6-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.34.6-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
                  "product_id": "webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.34.6-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
                  "product_id": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.34.6-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.34.6-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.34.6-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.34.6-1.el8?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.34.6-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-0:2.34.6-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.34.6-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-0:2.34.6-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.34.6-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-0:2.34.6-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.34.6-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-0:2.34.6-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.34.6-1.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src"
        },
        "product_reference": "webkit2gtk3-0:2.34.6-1.el8.src",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.34.6-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.34.6-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.34.6-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.34.6-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.34.6-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.34.6-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.34.6-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-30809",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034347"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free flaw was found in WebKitGTK. Specially crafted web content could use this flaw to trigger an arbitrary code execution when processed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Use-after-free leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30809"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034347",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034347"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30809",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30809"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30809",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30809"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Use-after-free leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30818",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034368"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A confusion type flaw was found in WebKitGTK. Specially crafted web content could use this flaw to trigger an arbitrary code execution when processed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Type confusion issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034368",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034368"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30818"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Type confusion issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30823",
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034373"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A logic issue was found in WebKitGTK. An attacker in a privileged network position could use this flaw to bypass HSTS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Logic issue leading to HSTS bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30823"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034373",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034373"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30823",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30823"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30823",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30823"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Logic issue leading to HSTS bypass"
    },
    {
      "cve": "CVE-2021-30836",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034376"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read flaw was found in WebKitGTK. A specially crafted audio file could use this flaw to trigger a disclosure of memory when processed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Out-of-bounds read leading to memory disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30836"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034376",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034376"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30836",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30836"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30836",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30836"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "webkitgtk: Out-of-bounds read leading to memory disclosure"
    },
    {
      "cve": "CVE-2021-30846",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2021-10-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2017898"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30846"
        },
        {
          "category": "external",
          "summary": "RHBZ#2017898",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2017898"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30846",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30846"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30846",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30846"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2021-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2021-0006.html"
        }
      ],
      "release_date": "2021-10-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30848",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2021-10-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2017901"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30848"
        },
        {
          "category": "external",
          "summary": "RHBZ#2017901",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2017901"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30848",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30848"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30848",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30848"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2021-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2021-0006.html"
        }
      ],
      "release_date": "2021-10-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30849",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2021-10-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2017904"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Multiple memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30849"
        },
        {
          "category": "external",
          "summary": "RHBZ#2017904",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2017904"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30849",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30849"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30849",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30849"
        }
      ],
      "release_date": "2021-10-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Multiple memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30851",
      "discovery_date": "2021-10-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2018573"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30851"
        },
        {
          "category": "external",
          "summary": "RHBZ#2018573",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2018573"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30851",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30851"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30851",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30851"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2021-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2021-0006.html"
        }
      ],
      "release_date": "2021-10-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30884",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034378"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way WebKitGTK performed CSS compositing. A malicious web site could possibly use this flaw to reveal user\u0027s browsing history.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: CSS compositing issue leading to revealing of the browsing history",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30884"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034378",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034378"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30884",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30884"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30884",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30884"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "webkitgtk: CSS compositing issue leading to revealing of the browsing history"
    },
    {
      "cve": "CVE-2021-30887",
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034381"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A logic issue was found in WebKitGTK. A specially crafted web content could use this flaw to bypass Content Security Policy bypass when processed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Logic issue leading to Content Security Policy bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30887"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034381",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034381"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30887",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30887"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30887",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30887"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Logic issue leading to Content Security Policy bypass"
    },
    {
      "cve": "CVE-2021-30888",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034383"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An information leak flaw was found in WebKitGTK. A malicious web site using Content Security Policy reports could use this flaw to leak information via redirects.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Information leak via Content Security Policy reports",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30888"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034383",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034383"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30888",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30888"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30888",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30888"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Information leak via Content Security Policy reports"
    },
    {
      "cve": "CVE-2021-30889",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034386"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in WebKitGTK. Specially crafted web content could use this flaw to trigger an arbitrary code execution when processed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Buffer overflow leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30889"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034386",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034386"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30889",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30889"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30889",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30889"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Buffer overflow leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30890",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034389"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A logic issue was found in WebKitGTK. Specially crafted web content could use this flaw to trigger a universal cross-site scripting when processed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Logic issue leading to universal cross-site scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30890"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034389",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034389"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30890",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30890"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30890",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30890"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Logic issue leading to universal cross-site scripting"
    },
    {
      "cve": "CVE-2021-30897",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2038907"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the resource timing API specification and its implementation in WebKitGTK. A malicious web site could use this flaw to trigger a cross-domain data exfiltration.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Cross-origin data exfiltration via resource timing API",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30897"
        },
        {
          "category": "external",
          "summary": "RHBZ#2038907",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2038907"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30897",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30897"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30897",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30897"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Cross-origin data exfiltration via resource timing API"
    },
    {
      "cve": "CVE-2021-30934",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-01-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044521"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability was found in webkitgtk. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash or lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30934"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044521",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044521"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30934",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30934"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30934",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30934"
        }
      ],
      "release_date": "2022-01-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30936",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-01-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044528"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30936"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044528",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044528"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30936",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30936"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30936",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30936"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0001.html"
        }
      ],
      "release_date": "2022-01-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30951",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-01-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044534"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30951"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044534",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044534"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30951",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30951"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30951",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30951"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0001.html"
        }
      ],
      "release_date": "2022-01-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30952",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-01-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044538"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk.  The vulnerability occurs due to improper input validation, which can lead to an integer overflow. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30952"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044538",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044538"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30952",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30952"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30952",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30952"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0001.html"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2022-01-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2026-03-05T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30953",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2022-01-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044542"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk.  The vulnerability occurs due to improper bounds checking, which can lead to an out-of-bounds read vulnerability. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30953"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044542",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044542"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30953",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30953"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30953",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30953"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0001.html"
        }
      ],
      "release_date": "2022-01-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30954",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2022-01-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044551"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk.  The vulnerability occurs due to improper memory handling, which can lead to a type confusion issue. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30954"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044551",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044551"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30954",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30954"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30954",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30954"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0001.html"
        }
      ],
      "release_date": "2022-01-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-30984",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "discovery_date": "2022-01-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044553"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. The vulnerability occurs due to improper state handling, which can lead to a race condition. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30984"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044553",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044553"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30984",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30984"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30984",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30984"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0001.html"
        }
      ],
      "release_date": "2022-01-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2021-45481",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "discovery_date": "2021-12-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2040327"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A segmentation violation vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted HTML files causing an application to halt or crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-45481"
        },
        {
          "category": "external",
          "summary": "RHBZ#2040327",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2040327"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-45481",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-45481"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-45481",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45481"
        }
      ],
      "release_date": "2021-12-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create"
    },
    {
      "cve": "CVE-2021-45482",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2021-12-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2040329"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted HTML files causing an application to halt or crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: use-after-free in WebCore::ContainerNode::firstChild",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-45482"
        },
        {
          "category": "external",
          "summary": "RHBZ#2040329",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2040329"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-45482",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-45482"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-45482",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45482"
        }
      ],
      "release_date": "2021-12-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: use-after-free in WebCore::ContainerNode::firstChild"
    },
    {
      "cve": "CVE-2021-45483",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2021-12-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2040331"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted HTML files causing an application to halt or crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: use-after-free in WebCore::Frame::page",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-45483"
        },
        {
          "category": "external",
          "summary": "RHBZ#2040331",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2040331"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-45483",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-45483"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-45483",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45483"
        }
      ],
      "release_date": "2021-12-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: use-after-free in WebCore::Frame::page"
    },
    {
      "cve": "CVE-2022-22589",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-02-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2053179"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. The vulnerability exists due to improper input validation in WebKit when processing email messages. This flaw allows a remote attacker to trick the victim into opening a specially crafted email message and execute arbitrary JavaScript code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing a maliciously crafted mail message may lead to running arbitrary javascript",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 6, 7, 8, and 9 are affected because the code-base is affected by this vulnerability.\n\nRed Hat Product Security has rated this issue as having a Moderate security impact, and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 6 and 7, hence, marked as Out-of-Support-Scope. \n\nFor additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle \u0026 Updates Policy: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22589"
        },
        {
          "category": "external",
          "summary": "RHBZ#2053179",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053179"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22589",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22589"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22589",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22589"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0002.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0002.html"
        }
      ],
      "release_date": "2022-02-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing a maliciously crafted mail message may lead to running arbitrary javascript"
    },
    {
      "cve": "CVE-2022-22590",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-02-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2053181"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in WebKitGTK. The vulnerability occurs when processing HTML content in WebKit. This flaw allows a remote attacker to trick the victim into opening a specially crafted web page, trigger a use-after-free error and execute arbitrary code on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 6, 7, 8, and 9 are affected because the code-base is affected by this vulnerability.\n\nRed Hat Product Security has rated this issue as having a Moderate security impact, and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 6 and 7, hence, marked as Out-of-Support-Scope. \n\nFor additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle \u0026 Updates Policy: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22590"
        },
        {
          "category": "external",
          "summary": "RHBZ#2053181",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053181"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22590",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22590"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22590",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22590"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0002.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0002.html"
        }
      ],
      "release_date": "2022-02-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-22592",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "discovery_date": "2022-02-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2053185"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. The flaw exists due to a logic issue when processing HTML content in WebKit. This flaw allows a remote attacker to create a specially crafted web page, trick the victim into visiting it, and prevent the Content Security Policy from being enforced, allowing the remote attacker to bypass implemented security restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 6, 7, 8, and 9 are affected because the code-base is affected by this vulnerability.\n\nRed Hat Product Security has rated this issue as having a Moderate security impact, and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 6 and 7, hence, marked as Out-of-Support-Scope. \n\nFor additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle \u0026 Updates Policy: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22592"
        },
        {
          "category": "external",
          "summary": "RHBZ#2053185",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053185"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22592",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22592"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22592",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22592"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0002.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0002.html"
        }
      ],
      "release_date": "2022-02-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced"
    },
    {
      "cve": "CVE-2022-22594",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2022-01-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2045291"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: A malicious website may exfiltrate data cross-origin",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22594"
        },
        {
          "category": "external",
          "summary": "RHBZ#2045291",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2045291"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22594",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22594"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22594",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22594"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0001.html"
        }
      ],
      "release_date": "2022-01-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: A malicious website may exfiltrate data cross-origin"
    },
    {
      "cve": "CVE-2022-22620",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-02-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2056474"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in WebKitGTK. The vulnerability occurs when processing HTML content in WebKit. This flaw allows a remote attacker to trick the victim into opening a specially crafted web page, triggering a use-after-free error and leading to the execution of arbitrary code on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22620"
        },
        {
          "category": "external",
          "summary": "RHBZ#2056474",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056474"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22620",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22620"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22620",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22620"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0003.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0003.html"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2022-02-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2022-02-11T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free"
    },
    {
      "cve": "CVE-2022-22637",
      "discovery_date": "2022-04-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2073903"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: logic issue was addressed with improved state management",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
          "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
          "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22637"
        },
        {
          "category": "external",
          "summary": "RHBZ#2073903",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2073903"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22637",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22637"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22637",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22637"
        }
      ],
      "release_date": "2022-04-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T13:27:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1777"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.src",
            "AppStream-8.6.0.GA:webkit2gtk3-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-debugsource-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-devel-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-debuginfo-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-0:2.34.6-1.el8.x86_64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.aarch64",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.i686",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.ppc64le",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.s390x",
            "AppStream-8.6.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.34.6-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: logic issue was addressed with improved state management"
    }
  ]
}

CVE-2021-45483 (GCVE-0-2021-45483)

Vulnerability from cvelistv5 – Published: 2021-12-25 00:03 – Updated: 2024-08-04 04:39

Summary

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

2 references

URL	Tags
https://github.com/ChijinZ/security_advisories/tr…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/21/2	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T04:39:21.042Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3"
          },
          {
            "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-01-21T18:06:09.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3"
        },
        {
          "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-45483",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3",
              "refsource": "MISC",
              "url": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3"
            },
            {
              "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-45483",
    "datePublished": "2021-12-25T00:03:55.000Z",
    "dateReserved": "2021-12-25T00:00:00.000Z",
    "dateUpdated": "2024-08-04T04:39:21.042Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-22589 (GCVE-0-2022-22589)

Vulnerability from cvelistv5 – Published: 2022-03-18 17:59 – Updated: 2024-08-03 03:14

Summary

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript.

Severity ?

No CVSS data available.

CWE

Processing a maliciously crafted mail message may lead to running arbitrary javascript

Assigner

apple

References

11 references

URL	Tags
https://support.apple.com/kb/HT213185	x_refsource_CONFIRM
https://support.apple.com/en-us/HT213053	x_refsource_MISC
https://support.apple.com/en-us/HT213054	x_refsource_MISC
https://support.apple.com/en-us/HT213057	x_refsource_MISC
https://support.apple.com/en-us/HT213059	x_refsource_MISC
https://support.apple.com/en-us/HT213058	x_refsource_MISC
https://support.apple.com/kb/HT213256	x_refsource_CONFIRM
https://support.apple.com/kb/HT213255	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2022/May/33	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2022/May/35	mailing-listx_refsource_FULLDISC
https://security.gentoo.org/glsa/202208-39	vendor-advisoryx_refsource_GENTOO

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15.3 (custom)
Apple	macOS	Affected: unspecified , < 12.2 (custom)
Apple	tvOS	Affected: unspecified , < 15.3 (custom)
Apple	tvOS	Affected: unspecified , < 15.3 (custom)
Apple	watchOS	Affected: unspecified , < 8.4 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:14:55.748Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213185"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213053"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213054"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213057"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213059"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213058"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213256"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213255"
          },
          {
            "name": "20220516 APPLE-SA-2022-05-16-4 Security Update 2022-004 Catalina",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/May/33"
          },
          {
            "name": "20220516 APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/May/35"
          },
          {
            "name": "GLSA-202208-39",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-39"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted mail message may lead to running arbitrary javascript",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-01T02:07:03.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT213185"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213053"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213054"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213057"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213059"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213058"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT213256"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT213255"
        },
        {
          "name": "20220516 APPLE-SA-2022-05-16-4 Security Update 2022-004 Catalina",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/May/33"
        },
        {
          "name": "20220516 APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/May/35"
        },
        {
          "name": "GLSA-202208-39",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202208-39"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2022-22589",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing a maliciously crafted mail message may lead to running arbitrary javascript"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/kb/HT213185",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT213185"
            },
            {
              "name": "https://support.apple.com/en-us/HT213053",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213053"
            },
            {
              "name": "https://support.apple.com/en-us/HT213054",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213054"
            },
            {
              "name": "https://support.apple.com/en-us/HT213057",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213057"
            },
            {
              "name": "https://support.apple.com/en-us/HT213059",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213059"
            },
            {
              "name": "https://support.apple.com/en-us/HT213058",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213058"
            },
            {
              "name": "https://support.apple.com/kb/HT213256",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT213256"
            },
            {
              "name": "https://support.apple.com/kb/HT213255",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT213255"
            },
            {
              "name": "20220516 APPLE-SA-2022-05-16-4 Security Update 2022-004 Catalina",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2022/May/33"
            },
            {
              "name": "20220516 APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2022/May/35"
            },
            {
              "name": "GLSA-202208-39",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202208-39"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-22589",
    "datePublished": "2022-03-18T17:59:18.000Z",
    "dateReserved": "2022-01-05T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:14:55.748Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-22637 (GCVE-0-2022-22637)

Vulnerability from cvelistv5 – Published: 2022-09-23 18:58 – Updated: 2025-05-22 15:51

Summary

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.

Severity ?

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

A malicious website may cause unexpected cross-origin behavior

Assigner

apple

References

5 references

URL	Tags
https://support.apple.com/en-us/HT213182	x_refsource_MISC
https://support.apple.com/en-us/HT213193	x_refsource_MISC
https://support.apple.com/en-us/HT213183	x_refsource_MISC
https://support.apple.com/en-us/HT213186	x_refsource_MISC
https://support.apple.com/en-us/HT213187	x_refsource_MISC

Impacted products

5 products

Vendor	Product	Version
Apple	Safari	Affected: unspecified , < 15.4 (custom)
Apple	tvOS	Affected: unspecified , < 15.4 (custom)
Apple	tvOS	Affected: unspecified , < 12.3 (custom)
Apple	tvOS	Affected: unspecified , < 15.4 (custom)
Apple	watchOS	Affected: unspecified , < 8.5 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:21:48.785Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213182"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213193"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213183"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213186"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213187"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-22637",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-22T15:51:39.364663Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-346",
                "description": "CWE-346 Origin Validation Error",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-22T15:51:44.309Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website may cause unexpected cross-origin behavior",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-23T18:58:30.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213182"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213193"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213183"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213186"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213187"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2022-22637",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.4"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "A malicious website may cause unexpected cross-origin behavior"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT213182",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213182"
            },
            {
              "name": "https://support.apple.com/en-us/HT213193",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213193"
            },
            {
              "name": "https://support.apple.com/en-us/HT213183",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213183"
            },
            {
              "name": "https://support.apple.com/en-us/HT213186",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213186"
            },
            {
              "name": "https://support.apple.com/en-us/HT213187",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213187"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-22637",
    "datePublished": "2022-09-23T18:58:30.000Z",
    "dateReserved": "2022-01-05T00:00:00.000Z",
    "dateUpdated": "2025-05-22T15:51:44.309Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30848 (GCVE-0-2021-30848)

Vulnerability from cvelistv5 – Published: 2021-10-19 13:11 – Updated: 2024-08-03 22:48

Summary

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to code execution

Assigner

apple

References

10 references

URL	Tags
https://support.apple.com/en-us/HT212807	x_refsource_MISC
https://support.apple.com/en-us/HT212814	x_refsource_MISC
https://support.apple.com/en-us/HT212816	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/10/26/9	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2021/10/27/1	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2021/10/27/2	mailing-listx_refsource_MLIST
http://seclists.org/fulldisclosure/2021/Oct/60	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2021/Oct/61	mailing-listx_refsource_FULLDISC
http://www.openwall.com/lists/oss-security/2021/10/27/4	mailing-listx_refsource_MLIST
https://support.apple.com/kb/HT212869	x_refsource_CONFIRM

Impacted products

3 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 14.8 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15 (custom)
Apple	Safari	Affected: unspecified , < 15 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:12.594Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212807"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212814"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212816"
          },
          {
            "name": "[oss-security] 20211026 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/26/9"
          },
          {
            "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/27/1"
          },
          {
            "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/27/2"
          },
          {
            "name": "20211027 APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Oct/60"
          },
          {
            "name": "20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Oct/61"
          },
          {
            "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/27/4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212869"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-19T12:06:40.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212807"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212814"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212816"
        },
        {
          "name": "[oss-security] 20211026 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/26/9"
        },
        {
          "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/27/1"
        },
        {
          "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/27/2"
        },
        {
          "name": "20211027 APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Oct/60"
        },
        {
          "name": "20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Oct/61"
        },
        {
          "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/27/4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212869"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30848",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "14.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212807",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212807"
            },
            {
              "name": "https://support.apple.com/en-us/HT212814",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212814"
            },
            {
              "name": "https://support.apple.com/en-us/HT212816",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212816"
            },
            {
              "name": "[oss-security] 20211026 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/26/9"
            },
            {
              "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/27/1"
            },
            {
              "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/27/2"
            },
            {
              "name": "20211027 APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Oct/60"
            },
            {
              "name": "20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Oct/61"
            },
            {
              "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/27/4"
            },
            {
              "name": "https://support.apple.com/kb/HT212869",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212869"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30848",
    "datePublished": "2021-10-19T13:11:44.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:12.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30846 (GCVE-0-2021-30846)

Vulnerability from cvelistv5 – Published: 2021-10-19 13:11 – Updated: 2024-08-03 22:48

Summary

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

18 references

URL	Tags
https://support.apple.com/en-us/HT212807	x_refsource_MISC
https://support.apple.com/en-us/HT212814	x_refsource_MISC
https://support.apple.com/en-us/HT212819	x_refsource_MISC
https://support.apple.com/en-us/HT212815	x_refsource_MISC
https://support.apple.com/en-us/HT212816	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/10/26/9	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2021/10/27/1	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2021/10/27/2	mailing-listx_refsource_MLIST
http://seclists.org/fulldisclosure/2021/Oct/60	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2021/Oct/62	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2021/Oct/63	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2021/Oct/61	mailing-listx_refsource_FULLDISC
http://www.openwall.com/lists/oss-security/2021/10/27/4	mailing-listx_refsource_MLIST
https://support.apple.com/kb/HT212869	x_refsource_CONFIRM
https://www.debian.org/security/2021/dsa-4995	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2021/dsa-4996	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 14.8 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15 (custom)
Apple	tvOS	Affected: unspecified , < 15 (custom)
Apple	Safari	Affected: unspecified , < 15 (custom)
Apple	watchOS	Affected: unspecified , < 8 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:14.211Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212807"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212814"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212819"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212815"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212816"
          },
          {
            "name": "[oss-security] 20211026 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/26/9"
          },
          {
            "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/27/1"
          },
          {
            "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/27/2"
          },
          {
            "name": "20211027 APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Oct/60"
          },
          {
            "name": "20211027 APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Oct/62"
          },
          {
            "name": "20211027 APPLE-SA-2021-10-26-11 Additional information for APPLE-SA-2021-09-20-3 tvOS 15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Oct/63"
          },
          {
            "name": "20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Oct/61"
          },
          {
            "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/27/4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212869"
          },
          {
            "name": "DSA-4995",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4995"
          },
          {
            "name": "DSA-4996",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4996"
          },
          {
            "name": "FEDORA-2021-131360fa9a",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/"
          },
          {
            "name": "FEDORA-2021-483d896d1d",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-19T12:06:11.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212807"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212814"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212819"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212815"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212816"
        },
        {
          "name": "[oss-security] 20211026 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/26/9"
        },
        {
          "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/27/1"
        },
        {
          "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/27/2"
        },
        {
          "name": "20211027 APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Oct/60"
        },
        {
          "name": "20211027 APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Oct/62"
        },
        {
          "name": "20211027 APPLE-SA-2021-10-26-11 Additional information for APPLE-SA-2021-09-20-3 tvOS 15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Oct/63"
        },
        {
          "name": "20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Oct/61"
        },
        {
          "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/27/4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212869"
        },
        {
          "name": "DSA-4995",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4995"
        },
        {
          "name": "DSA-4996",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4996"
        },
        {
          "name": "FEDORA-2021-131360fa9a",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/"
        },
        {
          "name": "FEDORA-2021-483d896d1d",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30846",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "14.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212807",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212807"
            },
            {
              "name": "https://support.apple.com/en-us/HT212814",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212814"
            },
            {
              "name": "https://support.apple.com/en-us/HT212819",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212819"
            },
            {
              "name": "https://support.apple.com/en-us/HT212815",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212815"
            },
            {
              "name": "https://support.apple.com/en-us/HT212816",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212816"
            },
            {
              "name": "[oss-security] 20211026 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/26/9"
            },
            {
              "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/27/1"
            },
            {
              "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/27/2"
            },
            {
              "name": "20211027 APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Oct/60"
            },
            {
              "name": "20211027 APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Oct/62"
            },
            {
              "name": "20211027 APPLE-SA-2021-10-26-11 Additional information for APPLE-SA-2021-09-20-3 tvOS 15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Oct/63"
            },
            {
              "name": "20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Oct/61"
            },
            {
              "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/27/4"
            },
            {
              "name": "https://support.apple.com/kb/HT212869",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212869"
            },
            {
              "name": "DSA-4995",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-4995"
            },
            {
              "name": "DSA-4996",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-4996"
            },
            {
              "name": "FEDORA-2021-131360fa9a",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/"
            },
            {
              "name": "FEDORA-2021-483d896d1d",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30846",
    "datePublished": "2021-10-19T13:11:45.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:14.211Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30884 (GCVE-0-2021-30884)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:49 – Updated: 2024-08-03 22:48

Summary

The issue was resolved with additional restrictions on CSS compositing. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Visiting a maliciously crafted website may reveal a user's browsing history.

Severity ?

No CVSS data available.

CWE

Visiting a maliciously crafted website may reveal a user's browsing history

Assigner

apple

References

5 references

URL	Tags
https://support.apple.com/en-us/HT212814	x_refsource_MISC
https://support.apple.com/en-us/HT212819	x_refsource_MISC
https://support.apple.com/en-us/HT212815	x_refsource_MISC
https://support.apple.com/kb/HT212869	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2021/12/20/6	mailing-listx_refsource_MLIST

Impacted products

3 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15 (custom)
Apple	tvOS	Affected: unspecified , < 15 (custom)
Apple	watchOS	Affected: unspecified , < 8 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:13.794Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212814"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212819"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212815"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212869"
          },
          {
            "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was resolved with additional restrictions on CSS compositing. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Visiting a maliciously crafted website may reveal a user\u0027s browsing history."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a maliciously crafted website may reveal a user\u0027s browsing history",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-20T15:06:49.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212814"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212819"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212815"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212869"
        },
        {
          "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30884",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The issue was resolved with additional restrictions on CSS compositing. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Visiting a maliciously crafted website may reveal a user\u0027s browsing history."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Visiting a maliciously crafted website may reveal a user\u0027s browsing history"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212814",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212814"
            },
            {
              "name": "https://support.apple.com/en-us/HT212819",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212819"
            },
            {
              "name": "https://support.apple.com/en-us/HT212815",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212815"
            },
            {
              "name": "https://support.apple.com/kb/HT212869",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212869"
            },
            {
              "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30884",
    "datePublished": "2021-08-24T18:49:48.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:13.794Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-22594 (GCVE-0-2022-22594)

Vulnerability from cvelistv5 – Published: 2022-03-18 17:59 – Updated: 2024-08-03 03:14

Summary

Severity ?

No CVSS data available.

CWE

A website may be able to track sensitive user information

Assigner

apple

References

5 references

URL	Tags
https://support.apple.com/en-us/HT213053	x_refsource_MISC
https://support.apple.com/en-us/HT213054	x_refsource_MISC
https://support.apple.com/en-us/HT213057	x_refsource_MISC
https://support.apple.com/en-us/HT213059	x_refsource_MISC
https://support.apple.com/en-us/HT213058	x_refsource_MISC

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15.3 (custom)
Apple	macOS	Affected: unspecified , < 12.2 (custom)
Apple	tvOS	Affected: unspecified , < 15.3 (custom)
Apple	tvOS	Affected: unspecified , < 15.3 (custom)
Apple	watchOS	Affected: unspecified , < 8.4 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:14:55.681Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213053"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213054"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213057"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213059"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213058"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A website may be able to track sensitive user information",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-03-18T17:59:23.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213053"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213054"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213057"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213059"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213058"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2022-22594",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "A website may be able to track sensitive user information"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT213053",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213053"
            },
            {
              "name": "https://support.apple.com/en-us/HT213054",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213054"
            },
            {
              "name": "https://support.apple.com/en-us/HT213057",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213057"
            },
            {
              "name": "https://support.apple.com/en-us/HT213059",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213059"
            },
            {
              "name": "https://support.apple.com/en-us/HT213058",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213058"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-22594",
    "datePublished": "2022-03-18T17:59:23.000Z",
    "dateReserved": "2022-01-05T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:14:55.681Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30809 (GCVE-0-2021-30809)

Vulnerability from cvelistv5 – Published: 2021-10-28 18:17 – Updated: 2024-08-03 22:48

Summary

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

6 references

URL	Tags
https://support.apple.com/en-us/HT212814	x_refsource_MISC
https://support.apple.com/en-us/HT212819	x_refsource_MISC
https://support.apple.com/en-us/HT212815	x_refsource_MISC
https://support.apple.com/en-us/HT212816	x_refsource_MISC
https://support.apple.com/kb/HT212869	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2021/12/20/6	mailing-listx_refsource_MLIST

Impacted products

4 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15 (custom)
Apple	tvOS	Affected: unspecified , < 15 (custom)
Apple	Safari	Affected: unspecified , < 15 (custom)
Apple	watchOS	Affected: unspecified , < 8 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:12.632Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212814"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212819"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212815"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212816"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212869"
          },
          {
            "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-20T15:06:32.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212814"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212819"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212815"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212816"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212869"
        },
        {
          "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30809",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212814",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212814"
            },
            {
              "name": "https://support.apple.com/en-us/HT212819",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212819"
            },
            {
              "name": "https://support.apple.com/en-us/HT212815",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212815"
            },
            {
              "name": "https://support.apple.com/en-us/HT212816",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212816"
            },
            {
              "name": "https://support.apple.com/kb/HT212869",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212869"
            },
            {
              "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30809",
    "datePublished": "2021-10-28T18:17:00.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:12.632Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30984 (GCVE-0-2021-30984)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:51 – Updated: 2024-08-03 22:48

Summary

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

10 references

URL	Tags
https://support.apple.com/en-us/HT212975	x_refsource_MISC
https://support.apple.com/en-us/HT212976	x_refsource_MISC
https://support.apple.com/en-us/HT212978	x_refsource_MISC
https://support.apple.com/en-us/HT212980	x_refsource_MISC
https://support.apple.com/en-us/HT212982	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/21/2	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2022/dsa-5061	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2022/dsa-5060	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

5 products

Vendor	Product	Version
Apple	watchOS	Affected: unspecified , < 8.3 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 12.1 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:14.319Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212975"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212976"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212978"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212980"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212982"
          },
          {
            "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
          },
          {
            "name": "FEDORA-2022-25a98f5d55",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
          },
          {
            "name": "DSA-5061",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5061"
          },
          {
            "name": "DSA-5060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5060"
          },
          {
            "name": "FEDORA-2022-f7366e60cb",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-06T03:06:31.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212975"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212976"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212978"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212980"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212982"
        },
        {
          "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
        },
        {
          "name": "FEDORA-2022-25a98f5d55",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
        },
        {
          "name": "DSA-5061",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5061"
        },
        {
          "name": "DSA-5060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5060"
        },
        {
          "name": "FEDORA-2022-f7366e60cb",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30984",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212975",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212975"
            },
            {
              "name": "https://support.apple.com/en-us/HT212976",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212976"
            },
            {
              "name": "https://support.apple.com/en-us/HT212978",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212978"
            },
            {
              "name": "https://support.apple.com/en-us/HT212980",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212980"
            },
            {
              "name": "https://support.apple.com/en-us/HT212982",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212982"
            },
            {
              "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
            },
            {
              "name": "FEDORA-2022-25a98f5d55",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
            },
            {
              "name": "DSA-5061",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5061"
            },
            {
              "name": "DSA-5060",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5060"
            },
            {
              "name": "FEDORA-2022-f7366e60cb",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30984",
    "datePublished": "2021-08-24T18:51:22.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:14.319Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-22620 (GCVE-0-2022-22620)

Vulnerability from cvelistv5 – Published: 2022-03-18 17:59 – Updated: 2025-10-21 23:15

Summary

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Severity ?

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Assigner

apple

References

4 references

URL	Tags
https://support.apple.com/en-us/HT213091	x_refsource_MISC
https://support.apple.com/en-us/HT213092	x_refsource_MISC
https://support.apple.com/en-us/HT213093	x_refsource_MISC
https://security.gentoo.org/glsa/202208-39	vendor-advisoryx_refsource_GENTOO

Impacted products

3 products

Vendor	Product	Version
Apple	Safari (v and )	Affected: unspecified , < 15.3 (custom)
Apple	macOS	Affected: unspecified , < 12.2 (custom)
Apple	macOS	Affected: unspecified , < 15.3 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:21:48.906Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213091"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213092"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213093"
          },
          {
            "name": "GLSA-202208-39",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-39"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-22620",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-29T16:36:15.439176Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-02-11",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22620"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:15:43.749Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22620"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2022-02-11T00:00:00.000Z",
            "value": "CVE-2022-22620 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari (v and )",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-01T02:06:59.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213091"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213092"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213093"
        },
        {
          "name": "GLSA-202208-39",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202208-39"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2022-22620",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Safari (v and )",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT213091",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213091"
            },
            {
              "name": "https://support.apple.com/en-us/HT213092",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213092"
            },
            {
              "name": "https://support.apple.com/en-us/HT213093",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213093"
            },
            {
              "name": "GLSA-202208-39",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202208-39"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-22620",
    "datePublished": "2022-03-18T17:59:40.000Z",
    "dateReserved": "2022-01-05T00:00:00.000Z",
    "dateUpdated": "2025-10-21T23:15:43.749Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30888 (GCVE-0-2021-30888)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:49 – Updated: 2024-08-03 22:48

Summary

An information leakage issue was addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1. A malicious website using Content Security Policy reports may be able to leak information via redirect behavior .

Severity ?

No CVSS data available.

CWE

A malicious website using Content Security Policy reports may be able to leak information via redirect behavior

Assigner

apple

References

6 references

URL	Tags
https://support.apple.com/en-us/HT212869	x_refsource_MISC
https://support.apple.com/en-us/HT212867	x_refsource_MISC
https://support.apple.com/en-us/HT212868	x_refsource_MISC
https://support.apple.com/en-us/HT212874	x_refsource_MISC
https://support.apple.com/en-us/HT212876	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/12/20/6	mailing-listx_refsource_MLIST

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15.1 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 14.8 (custom)
Apple	macOS	Affected: unspecified , < 12.0 (custom)
Apple	macOS	Affected: unspecified , < 8.1 (custom)
Apple	macOS	Affected: unspecified , < 15.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:13.861Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212869"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212867"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212868"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212874"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212876"
          },
          {
            "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An information leakage issue was addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1. A malicious website using Content Security Policy reports may be able to leak information via redirect behavior ."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website using Content Security Policy reports may be able to leak information via redirect behavior",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-20T15:06:37.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212869"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212867"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212868"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212874"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212876"
        },
        {
          "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30888",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "14.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.0"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An information leakage issue was addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1. A malicious website using Content Security Policy reports may be able to leak information via redirect behavior ."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "A malicious website using Content Security Policy reports may be able to leak information via redirect behavior"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212869",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212869"
            },
            {
              "name": "https://support.apple.com/en-us/HT212867",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212867"
            },
            {
              "name": "https://support.apple.com/en-us/HT212868",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212868"
            },
            {
              "name": "https://support.apple.com/en-us/HT212874",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212874"
            },
            {
              "name": "https://support.apple.com/en-us/HT212876",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212876"
            },
            {
              "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30888",
    "datePublished": "2021-08-24T18:49:52.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:13.861Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30936 (GCVE-0-2021-30936)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:50 – Updated: 2024-08-03 22:48

Summary

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

10 references

URL	Tags
https://support.apple.com/en-us/HT212975	x_refsource_MISC
https://support.apple.com/en-us/HT212976	x_refsource_MISC
https://support.apple.com/en-us/HT212978	x_refsource_MISC
https://support.apple.com/en-us/HT212980	x_refsource_MISC
https://support.apple.com/en-us/HT212982	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/21/2	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2022/dsa-5061	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2022/dsa-5060	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

5 products

Vendor	Product	Version
Apple	watchOS	Affected: unspecified , < 8.3 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 12.1 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:14.180Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212975"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212976"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212978"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212980"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212982"
          },
          {
            "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
          },
          {
            "name": "FEDORA-2022-25a98f5d55",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
          },
          {
            "name": "DSA-5061",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5061"
          },
          {
            "name": "DSA-5060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5060"
          },
          {
            "name": "FEDORA-2022-f7366e60cb",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-06T03:06:21.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212975"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212976"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212978"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212980"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212982"
        },
        {
          "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
        },
        {
          "name": "FEDORA-2022-25a98f5d55",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
        },
        {
          "name": "DSA-5061",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5061"
        },
        {
          "name": "DSA-5060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5060"
        },
        {
          "name": "FEDORA-2022-f7366e60cb",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30936",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212975",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212975"
            },
            {
              "name": "https://support.apple.com/en-us/HT212976",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212976"
            },
            {
              "name": "https://support.apple.com/en-us/HT212978",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212978"
            },
            {
              "name": "https://support.apple.com/en-us/HT212980",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212980"
            },
            {
              "name": "https://support.apple.com/en-us/HT212982",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212982"
            },
            {
              "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
            },
            {
              "name": "FEDORA-2022-25a98f5d55",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
            },
            {
              "name": "DSA-5061",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5061"
            },
            {
              "name": "DSA-5060",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5060"
            },
            {
              "name": "FEDORA-2022-f7366e60cb",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30936",
    "datePublished": "2021-08-24T18:50:37.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:14.180Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30836 (GCVE-0-2021-30836)

Vulnerability from cvelistv5 – Published: 2021-10-28 18:17 – Updated: 2024-08-03 22:48

Summary

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.

Severity ?

No CVSS data available.

CWE

Processing a maliciously crafted audio file may disclose restricted memory

Assigner

apple

References

7 references

URL	Tags
https://support.apple.com/en-us/HT212807	x_refsource_MISC
https://support.apple.com/kb/HT212816	x_refsource_CONFIRM
https://support.apple.com/en-us/HT212814	x_refsource_MISC
https://support.apple.com/en-us/HT212819	x_refsource_MISC
https://support.apple.com/en-us/HT212815	x_refsource_MISC
https://support.apple.com/kb/HT212869	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2021/12/20/6	mailing-listx_refsource_MLIST

Impacted products

4 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 14.8 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15 (custom)
Apple	tvOS	Affected: unspecified , < 15 (custom)
Apple	watchOS	Affected: unspecified , < 8 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:12.605Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212807"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212816"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212814"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212819"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212815"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212869"
          },
          {
            "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted audio file may disclose restricted memory",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-20T15:06:39.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212807"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212816"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212814"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212819"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212815"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212869"
        },
        {
          "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30836",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "14.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing a maliciously crafted audio file may disclose restricted memory"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212807",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212807"
            },
            {
              "name": "https://support.apple.com/kb/HT212816",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212816"
            },
            {
              "name": "https://support.apple.com/en-us/HT212814",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212814"
            },
            {
              "name": "https://support.apple.com/en-us/HT212819",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212819"
            },
            {
              "name": "https://support.apple.com/en-us/HT212815",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212815"
            },
            {
              "name": "https://support.apple.com/kb/HT212869",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212869"
            },
            {
              "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30836",
    "datePublished": "2021-10-28T18:17:16.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:12.605Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-22590 (GCVE-0-2022-22590)

Vulnerability from cvelistv5 – Published: 2022-03-18 17:59 – Updated: 2024-08-03 03:14

Summary

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

6 references

URL	Tags
https://support.apple.com/en-us/HT213053	x_refsource_MISC
https://support.apple.com/en-us/HT213054	x_refsource_MISC
https://support.apple.com/en-us/HT213057	x_refsource_MISC
https://support.apple.com/en-us/HT213059	x_refsource_MISC
https://support.apple.com/en-us/HT213058	x_refsource_MISC
https://security.gentoo.org/glsa/202208-39	vendor-advisoryx_refsource_GENTOO

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15.3 (custom)
Apple	macOS	Affected: unspecified , < 12.2 (custom)
Apple	tvOS	Affected: unspecified , < 15.3 (custom)
Apple	tvOS	Affected: unspecified , < 15.3 (custom)
Apple	watchOS	Affected: unspecified , < 8.4 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:14:55.778Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213053"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213054"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213057"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213059"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213058"
          },
          {
            "name": "GLSA-202208-39",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-39"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-01T02:07:01.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213053"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213054"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213057"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213059"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213058"
        },
        {
          "name": "GLSA-202208-39",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202208-39"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2022-22590",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT213053",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213053"
            },
            {
              "name": "https://support.apple.com/en-us/HT213054",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213054"
            },
            {
              "name": "https://support.apple.com/en-us/HT213057",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213057"
            },
            {
              "name": "https://support.apple.com/en-us/HT213059",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213059"
            },
            {
              "name": "https://support.apple.com/en-us/HT213058",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213058"
            },
            {
              "name": "GLSA-202208-39",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202208-39"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-22590",
    "datePublished": "2022-03-18T17:59:20.000Z",
    "dateReserved": "2022-01-05T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:14:55.778Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30952 (GCVE-0-2021-30952)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:50 – Updated: 2026-03-06 05:01

Summary

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity ?

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

10 references

URL	Tags
https://support.apple.com/en-us/HT212975	x_refsource_MISC
https://support.apple.com/en-us/HT212976	x_refsource_MISC
https://support.apple.com/en-us/HT212978	x_refsource_MISC
https://support.apple.com/en-us/HT212980	x_refsource_MISC
https://support.apple.com/en-us/HT212982	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/21/2	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2022/dsa-5061	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2022/dsa-5060	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

5 products

Vendor	Product	Version
Apple	watchOS	Affected: unspecified , < 8.3 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 12.1 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:14.237Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212975"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212976"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212978"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212980"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212982"
          },
          {
            "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
          },
          {
            "name": "FEDORA-2022-25a98f5d55",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
          },
          {
            "name": "DSA-5061",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5061"
          },
          {
            "name": "DSA-5060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5060"
          },
          {
            "name": "FEDORA-2022-f7366e60cb",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-30952",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-05T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-03-05",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30952"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-190",
                "description": "CWE-190 Integer Overflow or Wraparound",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-06T05:01:17.601Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30952"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-03-05T00:00:00.000Z",
            "value": "CVE-2021-30952 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-06T03:06:35.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212975"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212976"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212978"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212980"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212982"
        },
        {
          "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
        },
        {
          "name": "FEDORA-2022-25a98f5d55",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
        },
        {
          "name": "DSA-5061",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5061"
        },
        {
          "name": "DSA-5060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5060"
        },
        {
          "name": "FEDORA-2022-f7366e60cb",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30952",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212975",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212975"
            },
            {
              "name": "https://support.apple.com/en-us/HT212976",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212976"
            },
            {
              "name": "https://support.apple.com/en-us/HT212978",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212978"
            },
            {
              "name": "https://support.apple.com/en-us/HT212980",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212980"
            },
            {
              "name": "https://support.apple.com/en-us/HT212982",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212982"
            },
            {
              "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
            },
            {
              "name": "FEDORA-2022-25a98f5d55",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
            },
            {
              "name": "DSA-5061",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5061"
            },
            {
              "name": "DSA-5060",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5060"
            },
            {
              "name": "FEDORA-2022-f7366e60cb",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30952",
    "datePublished": "2021-08-24T18:50:52.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2026-03-06T05:01:17.601Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-30890 (GCVE-0-2021-30890)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:49 – Updated: 2024-08-03 22:48

Summary

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to universal cross site scripting

Assigner

apple

References

9 references

URL	Tags
https://support.apple.com/en-us/HT212869	x_refsource_MISC
https://support.apple.com/en-us/HT212867	x_refsource_MISC
https://support.apple.com/en-us/HT212874	x_refsource_MISC
https://support.apple.com/en-us/HT212876	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/12/20/6	mailing-listx_refsource_MLIST
https://www.debian.org/security/2021/dsa-5030	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2021/dsa-5031	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

4 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15.1 (custom)
Apple	macOS	Affected: unspecified , < 12.0 (custom)
Apple	macOS	Affected: unspecified , < 8.1 (custom)
Apple	macOS	Affected: unspecified , < 15.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:13.293Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212869"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212867"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212874"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212876"
          },
          {
            "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
          },
          {
            "name": "DSA-5030",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-5030"
          },
          {
            "name": "DSA-5031",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-5031"
          },
          {
            "name": "FEDORA-2022-25a98f5d55",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
          },
          {
            "name": "FEDORA-2022-f7366e60cb",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to universal cross site scripting",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-06T03:06:33.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212869"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212867"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212874"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212876"
        },
        {
          "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
        },
        {
          "name": "DSA-5030",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-5030"
        },
        {
          "name": "DSA-5031",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-5031"
        },
        {
          "name": "FEDORA-2022-25a98f5d55",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
        },
        {
          "name": "FEDORA-2022-f7366e60cb",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30890",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.0"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to universal cross site scripting"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212869",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212869"
            },
            {
              "name": "https://support.apple.com/en-us/HT212867",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212867"
            },
            {
              "name": "https://support.apple.com/en-us/HT212874",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212874"
            },
            {
              "name": "https://support.apple.com/en-us/HT212876",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212876"
            },
            {
              "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
            },
            {
              "name": "DSA-5030",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-5030"
            },
            {
              "name": "DSA-5031",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-5031"
            },
            {
              "name": "FEDORA-2022-25a98f5d55",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
            },
            {
              "name": "FEDORA-2022-f7366e60cb",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30890",
    "datePublished": "2021-08-24T18:49:54.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:13.293Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30818 (GCVE-0-2021-30818)

Vulnerability from cvelistv5 – Published: 2021-10-28 18:17 – Updated: 2024-08-03 22:48

Summary

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

7 references

URL	Tags
https://support.apple.com/en-us/HT212807	x_refsource_MISC
https://support.apple.com/en-us/HT212814	x_refsource_MISC
https://support.apple.com/en-us/HT212819	x_refsource_MISC
https://support.apple.com/en-us/HT212815	x_refsource_MISC
https://support.apple.com/en-us/HT212816	x_refsource_MISC
https://support.apple.com/kb/HT212869	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2021/12/20/6	mailing-listx_refsource_MLIST

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 14.8 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15 (custom)
Apple	tvOS	Affected: unspecified , < 15 (custom)
Apple	Safari	Affected: unspecified , < 15 (custom)
Apple	watchOS	Affected: unspecified , < 8 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:12.668Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212807"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212814"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212819"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212815"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212816"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212869"
          },
          {
            "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-20T15:06:34.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212807"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212814"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212819"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212815"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212816"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212869"
        },
        {
          "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30818",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "14.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212807",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212807"
            },
            {
              "name": "https://support.apple.com/en-us/HT212814",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212814"
            },
            {
              "name": "https://support.apple.com/en-us/HT212819",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212819"
            },
            {
              "name": "https://support.apple.com/en-us/HT212815",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212815"
            },
            {
              "name": "https://support.apple.com/en-us/HT212816",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212816"
            },
            {
              "name": "https://support.apple.com/kb/HT212869",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212869"
            },
            {
              "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30818",
    "datePublished": "2021-10-28T18:17:02.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:12.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30887 (GCVE-0-2021-30887)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:49 – Updated: 2024-08-03 22:48

Summary

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy

Assigner

apple

References

9 references

URL	Tags
https://support.apple.com/en-us/HT212869	x_refsource_MISC
https://support.apple.com/en-us/HT212867	x_refsource_MISC
https://support.apple.com/en-us/HT212874	x_refsource_MISC
https://support.apple.com/en-us/HT212876	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/12/20/6	mailing-listx_refsource_MLIST
https://www.debian.org/security/2021/dsa-5030	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2021/dsa-5031	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

4 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15.1 (custom)
Apple	macOS	Affected: unspecified , < 12.0 (custom)
Apple	macOS	Affected: unspecified , < 8.1 (custom)
Apple	macOS	Affected: unspecified , < 15.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:13.791Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212869"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212867"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212874"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212876"
          },
          {
            "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
          },
          {
            "name": "DSA-5030",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-5030"
          },
          {
            "name": "DSA-5031",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-5031"
          },
          {
            "name": "FEDORA-2022-25a98f5d55",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
          },
          {
            "name": "FEDORA-2022-f7366e60cb",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-06T03:06:19.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212869"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212867"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212874"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212876"
        },
        {
          "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
        },
        {
          "name": "DSA-5030",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-5030"
        },
        {
          "name": "DSA-5031",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-5031"
        },
        {
          "name": "FEDORA-2022-25a98f5d55",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
        },
        {
          "name": "FEDORA-2022-f7366e60cb",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30887",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.0"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212869",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212869"
            },
            {
              "name": "https://support.apple.com/en-us/HT212867",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212867"
            },
            {
              "name": "https://support.apple.com/en-us/HT212874",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212874"
            },
            {
              "name": "https://support.apple.com/en-us/HT212876",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212876"
            },
            {
              "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
            },
            {
              "name": "DSA-5030",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-5030"
            },
            {
              "name": "DSA-5031",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-5031"
            },
            {
              "name": "FEDORA-2022-25a98f5d55",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
            },
            {
              "name": "FEDORA-2022-f7366e60cb",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30887",
    "datePublished": "2021-08-24T18:49:51.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:13.791Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30897 (GCVE-0-2021-30897)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:50 – Updated: 2024-08-03 22:48

Summary

An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin.

Severity ?

No CVSS data available.

CWE

A malicious website may exfiltrate data cross-origin

Assigner

apple

References

3 references

URL	Tags
https://support.apple.com/kb/HT212814	x_refsource_CONFIRM
https://support.apple.com/kb/HT212815	x_refsource_CONFIRM
https://support.apple.com/en-us/HT212869	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Apple	macOS	Affected: unspecified , < 12.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:13.799Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212814"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212815"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212869"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website may exfiltrate data cross-origin",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-01-20T20:06:56.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212814"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212815"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212869"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30897",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "A malicious website may exfiltrate data cross-origin"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/kb/HT212814",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212814"
            },
            {
              "name": "https://support.apple.com/kb/HT212815",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212815"
            },
            {
              "name": "https://support.apple.com/en-us/HT212869",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212869"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30897",
    "datePublished": "2021-08-24T18:50:00.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:13.799Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30849 (GCVE-0-2021-30849)

Vulnerability from cvelistv5 – Published: 2021-10-19 13:11 – Updated: 2024-08-03 22:48

Summary

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

16 references

URL	Tags
https://support.apple.com/en-us/HT212807	x_refsource_MISC
https://support.apple.com/en-us/HT212814	x_refsource_MISC
https://support.apple.com/en-us/HT212819	x_refsource_MISC
https://support.apple.com/en-us/HT212815	x_refsource_MISC
https://support.apple.com/en-us/HT212817	x_refsource_MISC
https://support.apple.com/en-us/HT212816	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/10/26/9	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2021/10/27/1	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2021/10/27/2	mailing-listx_refsource_MLIST
http://seclists.org/fulldisclosure/2021/Oct/60	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2021/Oct/62	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2021/Oct/63	mailing-listx_refsource_FULLDISC
http://seclists.org/fulldisclosure/2021/Oct/61	mailing-listx_refsource_FULLDISC
http://www.openwall.com/lists/oss-security/2021/10/27/4	mailing-listx_refsource_MLIST
https://support.apple.com/kb/HT212869	x_refsource_CONFIRM
https://support.apple.com/kb/HT212953	x_refsource_CONFIRM

Impacted products

6 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 14.8 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15 (custom)
Apple	tvOS	Affected: unspecified , < 15 (custom)
Apple	Safari	Affected: unspecified , < 15 (custom)
Apple	iTunes for Windows	Affected: unspecified , < 12.12 (custom)
Apple	watchOS	Affected: unspecified , < 8 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:13.917Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212807"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212814"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212819"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212815"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212817"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212816"
          },
          {
            "name": "[oss-security] 20211026 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/26/9"
          },
          {
            "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/27/1"
          },
          {
            "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/27/2"
          },
          {
            "name": "20211027 APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Oct/60"
          },
          {
            "name": "20211027 APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Oct/62"
          },
          {
            "name": "20211027 APPLE-SA-2021-10-26-11 Additional information for APPLE-SA-2021-09-20-3 tvOS 15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Oct/63"
          },
          {
            "name": "20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Oct/61"
          },
          {
            "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/27/4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212869"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212953"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iTunes for Windows",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.12",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-19T12:06:18.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212807"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212814"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212819"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212815"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212817"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212816"
        },
        {
          "name": "[oss-security] 20211026 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/26/9"
        },
        {
          "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/27/1"
        },
        {
          "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/27/2"
        },
        {
          "name": "20211027 APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Oct/60"
        },
        {
          "name": "20211027 APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Oct/62"
        },
        {
          "name": "20211027 APPLE-SA-2021-10-26-11 Additional information for APPLE-SA-2021-09-20-3 tvOS 15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Oct/63"
        },
        {
          "name": "20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Oct/61"
        },
        {
          "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/27/4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212869"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212953"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30849",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "14.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iTunes for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.12"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212807",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212807"
            },
            {
              "name": "https://support.apple.com/en-us/HT212814",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212814"
            },
            {
              "name": "https://support.apple.com/en-us/HT212819",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212819"
            },
            {
              "name": "https://support.apple.com/en-us/HT212815",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212815"
            },
            {
              "name": "https://support.apple.com/en-us/HT212817",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212817"
            },
            {
              "name": "https://support.apple.com/en-us/HT212816",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212816"
            },
            {
              "name": "[oss-security] 20211026 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/26/9"
            },
            {
              "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/27/1"
            },
            {
              "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/27/2"
            },
            {
              "name": "20211027 APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Oct/60"
            },
            {
              "name": "20211027 APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Oct/62"
            },
            {
              "name": "20211027 APPLE-SA-2021-10-26-11 Additional information for APPLE-SA-2021-09-20-3 tvOS 15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Oct/63"
            },
            {
              "name": "20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Oct/61"
            },
            {
              "name": "[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/27/4"
            },
            {
              "name": "https://support.apple.com/kb/HT212869",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212869"
            },
            {
              "name": "https://support.apple.com/kb/HT212953",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212953"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30849",
    "datePublished": "2021-10-19T13:11:42.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:13.917Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30823 (GCVE-0-2021-30823)

Vulnerability from cvelistv5 – Published: 2021-10-28 18:17 – Updated: 2024-08-03 22:48

Summary

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS.

Severity ?

No CVSS data available.

CWE

An attacker in a privileged network position may be able to bypass HSTS

Assigner

apple

References

7 references

URL	Tags
https://support.apple.com/en-us/HT212807	x_refsource_MISC
https://support.apple.com/en-us/HT212819	x_refsource_MISC
https://support.apple.com/en-us/HT212815	x_refsource_MISC
https://support.apple.com/en-us/HT212816	x_refsource_MISC
https://support.apple.com/en-us/HT212869	x_refsource_MISC
https://support.apple.com/kb/HT212953	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2021/12/20/6	mailing-listx_refsource_MLIST

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 14.8 (custom)
Apple	tvOS	Affected: unspecified , < 15 (custom)
Apple	Safari	Affected: unspecified , < 15 (custom)
Apple	watchOS	Affected: unspecified , < 8 (custom)
Apple	macOS	Affected: unspecified , < 12.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:13.276Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212807"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212819"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212815"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212816"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212869"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212953"
          },
          {
            "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker in a privileged network position may be able to bypass HSTS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-20T15:06:45.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212807"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212819"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212815"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212816"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212869"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212953"
        },
        {
          "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30823",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "14.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "An attacker in a privileged network position may be able to bypass HSTS"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212807",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212807"
            },
            {
              "name": "https://support.apple.com/en-us/HT212819",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212819"
            },
            {
              "name": "https://support.apple.com/en-us/HT212815",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212815"
            },
            {
              "name": "https://support.apple.com/en-us/HT212816",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212816"
            },
            {
              "name": "https://support.apple.com/en-us/HT212869",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212869"
            },
            {
              "name": "https://support.apple.com/kb/HT212953",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212953"
            },
            {
              "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30823",
    "datePublished": "2021-10-28T18:17:07.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:13.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30934 (GCVE-0-2021-30934)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:50 – Updated: 2024-08-03 22:48

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

10 references

URL	Tags
https://support.apple.com/en-us/HT212975	x_refsource_MISC
https://support.apple.com/en-us/HT212976	x_refsource_MISC
https://support.apple.com/en-us/HT212978	x_refsource_MISC
https://support.apple.com/en-us/HT212980	x_refsource_MISC
https://support.apple.com/en-us/HT212982	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/21/2	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2022/dsa-5061	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2022/dsa-5060	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

5 products

Vendor	Product	Version
Apple	watchOS	Affected: unspecified , < 8.3 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 12.1 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:14.225Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212975"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212976"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212978"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212980"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212982"
          },
          {
            "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
          },
          {
            "name": "FEDORA-2022-25a98f5d55",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
          },
          {
            "name": "DSA-5061",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5061"
          },
          {
            "name": "DSA-5060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5060"
          },
          {
            "name": "FEDORA-2022-f7366e60cb",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-06T03:06:17.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212975"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212976"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212978"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212980"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212982"
        },
        {
          "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
        },
        {
          "name": "FEDORA-2022-25a98f5d55",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
        },
        {
          "name": "DSA-5061",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5061"
        },
        {
          "name": "DSA-5060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5060"
        },
        {
          "name": "FEDORA-2022-f7366e60cb",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30934",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212975",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212975"
            },
            {
              "name": "https://support.apple.com/en-us/HT212976",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212976"
            },
            {
              "name": "https://support.apple.com/en-us/HT212978",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212978"
            },
            {
              "name": "https://support.apple.com/en-us/HT212980",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212980"
            },
            {
              "name": "https://support.apple.com/en-us/HT212982",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212982"
            },
            {
              "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
            },
            {
              "name": "FEDORA-2022-25a98f5d55",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
            },
            {
              "name": "DSA-5061",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5061"
            },
            {
              "name": "DSA-5060",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5060"
            },
            {
              "name": "FEDORA-2022-f7366e60cb",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30934",
    "datePublished": "2021-08-24T18:50:35.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:14.225Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-45482 (GCVE-0-2021-45482)

Vulnerability from cvelistv5 – Published: 2021-12-25 00:04 – Updated: 2024-08-04 04:39

Summary

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

2 references

URL	Tags
https://github.com/ChijinZ/security_advisories/tr…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/21/2	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T04:39:21.069Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3"
          },
          {
            "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-01-21T18:06:25.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3"
        },
        {
          "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-45482",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3",
              "refsource": "MISC",
              "url": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3"
            },
            {
              "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-45482",
    "datePublished": "2021-12-25T00:04:08.000Z",
    "dateReserved": "2021-12-25T00:00:00.000Z",
    "dateUpdated": "2024-08-04T04:39:21.069Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30954 (GCVE-0-2021-30954)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:50 – Updated: 2024-08-03 22:48

Summary

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

10 references

URL	Tags
https://support.apple.com/en-us/HT212975	x_refsource_MISC
https://support.apple.com/en-us/HT212976	x_refsource_MISC
https://support.apple.com/en-us/HT212978	x_refsource_MISC
https://support.apple.com/en-us/HT212980	x_refsource_MISC
https://support.apple.com/en-us/HT212982	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/21/2	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2022/dsa-5061	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2022/dsa-5060	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

5 products

Vendor	Product	Version
Apple	watchOS	Affected: unspecified , < 8.3 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 12.1 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:14.215Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212975"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212976"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212978"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212980"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212982"
          },
          {
            "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
          },
          {
            "name": "FEDORA-2022-25a98f5d55",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
          },
          {
            "name": "DSA-5061",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5061"
          },
          {
            "name": "DSA-5060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5060"
          },
          {
            "name": "FEDORA-2022-f7366e60cb",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-06T03:06:28.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212975"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212976"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212978"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212980"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212982"
        },
        {
          "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
        },
        {
          "name": "FEDORA-2022-25a98f5d55",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
        },
        {
          "name": "DSA-5061",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5061"
        },
        {
          "name": "DSA-5060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5060"
        },
        {
          "name": "FEDORA-2022-f7366e60cb",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30954",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212975",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212975"
            },
            {
              "name": "https://support.apple.com/en-us/HT212976",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212976"
            },
            {
              "name": "https://support.apple.com/en-us/HT212978",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212978"
            },
            {
              "name": "https://support.apple.com/en-us/HT212980",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212980"
            },
            {
              "name": "https://support.apple.com/en-us/HT212982",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212982"
            },
            {
              "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
            },
            {
              "name": "FEDORA-2022-25a98f5d55",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
            },
            {
              "name": "DSA-5061",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5061"
            },
            {
              "name": "DSA-5060",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5060"
            },
            {
              "name": "FEDORA-2022-f7366e60cb",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30954",
    "datePublished": "2021-08-24T18:50:54.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:14.215Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-45481 (GCVE-0-2021-45481)

Vulnerability from cvelistv5 – Published: 2021-12-25 00:04 – Updated: 2024-08-04 04:39

Summary

In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application crash, a different vulnerability than CVE-2021-30889.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

2 references

URL	Tags
https://github.com/ChijinZ/security_advisories/tr…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/21/2	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T04:39:21.066Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3"
          },
          {
            "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application crash, a different vulnerability than CVE-2021-30889."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-01-21T18:06:10.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3"
        },
        {
          "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-45481",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application crash, a different vulnerability than CVE-2021-30889."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3",
              "refsource": "MISC",
              "url": "https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3"
            },
            {
              "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-45481",
    "datePublished": "2021-12-25T00:04:23.000Z",
    "dateReserved": "2021-12-25T00:00:00.000Z",
    "dateUpdated": "2024-08-04T04:39:21.066Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-22592 (GCVE-0-2022-22592)

Vulnerability from cvelistv5 – Published: 2022-03-18 17:59 – Updated: 2024-08-03 03:14

Summary

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may prevent Content Security Policy from being enforced

Assigner

apple

References

6 references

URL	Tags
https://support.apple.com/en-us/HT213053	x_refsource_MISC
https://support.apple.com/en-us/HT213054	x_refsource_MISC
https://support.apple.com/en-us/HT213057	x_refsource_MISC
https://support.apple.com/en-us/HT213059	x_refsource_MISC
https://support.apple.com/en-us/HT213058	x_refsource_MISC
https://security.gentoo.org/glsa/202208-39	vendor-advisoryx_refsource_GENTOO

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15.3 (custom)
Apple	macOS	Affected: unspecified , < 12.2 (custom)
Apple	tvOS	Affected: unspecified , < 15.3 (custom)
Apple	tvOS	Affected: unspecified , < 15.3 (custom)
Apple	watchOS	Affected: unspecified , < 8.4 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:14:55.777Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213053"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213054"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213057"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213059"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213058"
          },
          {
            "name": "GLSA-202208-39",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-39"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may prevent Content Security Policy from being enforced",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-01T02:06:58.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213053"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213054"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213057"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213059"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT213058"
        },
        {
          "name": "GLSA-202208-39",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202208-39"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2022-22592",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may prevent Content Security Policy from being enforced"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT213053",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213053"
            },
            {
              "name": "https://support.apple.com/en-us/HT213054",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213054"
            },
            {
              "name": "https://support.apple.com/en-us/HT213057",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213057"
            },
            {
              "name": "https://support.apple.com/en-us/HT213059",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213059"
            },
            {
              "name": "https://support.apple.com/en-us/HT213058",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT213058"
            },
            {
              "name": "GLSA-202208-39",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202208-39"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-22592",
    "datePublished": "2022-03-18T17:59:24.000Z",
    "dateReserved": "2022-01-05T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:14:55.777Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30951 (GCVE-0-2021-30951)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:50 – Updated: 2024-08-03 22:48

Summary

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

10 references

URL	Tags
https://support.apple.com/en-us/HT212975	x_refsource_MISC
https://support.apple.com/en-us/HT212976	x_refsource_MISC
https://support.apple.com/en-us/HT212978	x_refsource_MISC
https://support.apple.com/en-us/HT212980	x_refsource_MISC
https://support.apple.com/en-us/HT212982	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/21/2	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2022/dsa-5061	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2022/dsa-5060	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

5 products

Vendor	Product	Version
Apple	watchOS	Affected: unspecified , < 8.3 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 12.1 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:14.448Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212975"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212976"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212978"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212980"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212982"
          },
          {
            "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
          },
          {
            "name": "FEDORA-2022-25a98f5d55",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
          },
          {
            "name": "DSA-5061",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5061"
          },
          {
            "name": "DSA-5060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5060"
          },
          {
            "name": "FEDORA-2022-f7366e60cb",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-06T03:06:26.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212975"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212976"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212978"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212980"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212982"
        },
        {
          "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
        },
        {
          "name": "FEDORA-2022-25a98f5d55",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
        },
        {
          "name": "DSA-5061",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5061"
        },
        {
          "name": "DSA-5060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5060"
        },
        {
          "name": "FEDORA-2022-f7366e60cb",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30951",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212975",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212975"
            },
            {
              "name": "https://support.apple.com/en-us/HT212976",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212976"
            },
            {
              "name": "https://support.apple.com/en-us/HT212978",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212978"
            },
            {
              "name": "https://support.apple.com/en-us/HT212980",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212980"
            },
            {
              "name": "https://support.apple.com/en-us/HT212982",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212982"
            },
            {
              "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
            },
            {
              "name": "FEDORA-2022-25a98f5d55",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
            },
            {
              "name": "DSA-5061",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5061"
            },
            {
              "name": "DSA-5060",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5060"
            },
            {
              "name": "FEDORA-2022-f7366e60cb",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30951",
    "datePublished": "2021-08-24T18:50:51.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:14.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30953 (GCVE-0-2021-30953)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:50 – Updated: 2024-08-03 22:48

Summary

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

10 references

URL	Tags
https://support.apple.com/en-us/HT212975	x_refsource_MISC
https://support.apple.com/en-us/HT212976	x_refsource_MISC
https://support.apple.com/en-us/HT212978	x_refsource_MISC
https://support.apple.com/en-us/HT212980	x_refsource_MISC
https://support.apple.com/en-us/HT212982	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/21/2	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://www.debian.org/security/2022/dsa-5061	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2022/dsa-5060	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

5 products

Vendor	Product	Version
Apple	watchOS	Affected: unspecified , < 8.3 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 12.1 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)
Apple	macOS	Affected: unspecified , < 15.2 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:14.262Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212975"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212976"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212978"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212980"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212982"
          },
          {
            "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
          },
          {
            "name": "FEDORA-2022-25a98f5d55",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
          },
          {
            "name": "DSA-5061",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5061"
          },
          {
            "name": "DSA-5060",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5060"
          },
          {
            "name": "FEDORA-2022-f7366e60cb",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-06T03:06:24.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212975"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212976"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212978"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212980"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212982"
        },
        {
          "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
        },
        {
          "name": "FEDORA-2022-25a98f5d55",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
        },
        {
          "name": "DSA-5061",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5061"
        },
        {
          "name": "DSA-5060",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5060"
        },
        {
          "name": "FEDORA-2022-f7366e60cb",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30953",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212975",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212975"
            },
            {
              "name": "https://support.apple.com/en-us/HT212976",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212976"
            },
            {
              "name": "https://support.apple.com/en-us/HT212978",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212978"
            },
            {
              "name": "https://support.apple.com/en-us/HT212980",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212980"
            },
            {
              "name": "https://support.apple.com/en-us/HT212982",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212982"
            },
            {
              "name": "[oss-security] 20220121 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/01/21/2"
            },
            {
              "name": "FEDORA-2022-25a98f5d55",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/"
            },
            {
              "name": "DSA-5061",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5061"
            },
            {
              "name": "DSA-5060",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5060"
            },
            {
              "name": "FEDORA-2022-f7366e60cb",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30953",
    "datePublished": "2021-08-24T18:50:53.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:14.262Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30851 (GCVE-0-2021-30851)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:49 – Updated: 2024-08-03 22:48

Summary

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to code execution

Assigner

apple

References

10 references

URL	Tags
https://support.apple.com/en-us/HT212814	x_refsource_MISC
https://support.apple.com/en-us/HT212819	x_refsource_MISC
https://support.apple.com/en-us/HT212815	x_refsource_MISC
https://support.apple.com/en-us/HT212816	x_refsource_MISC
https://support.apple.com/kb/HT212869	x_refsource_CONFIRM
https://www.debian.org/security/2021/dsa-4995	vendor-advisoryx_refsource_DEBIAN
https://www.debian.org/security/2021/dsa-4996	vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2021/10/31/1	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

4 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15 (custom)
Apple	tvOS	Affected: unspecified , < 15 (custom)
Apple	Safari	Affected: unspecified , < 15 (custom)
Apple	watchOS	Affected: unspecified , < 8 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:13.383Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212814"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212819"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212815"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212816"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212869"
          },
          {
            "name": "DSA-4995",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4995"
          },
          {
            "name": "DSA-4996",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4996"
          },
          {
            "name": "[oss-security] 20211031 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/31/1"
          },
          {
            "name": "FEDORA-2021-131360fa9a",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/"
          },
          {
            "name": "FEDORA-2021-483d896d1d",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-19T12:06:38.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212814"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212819"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212815"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212816"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212869"
        },
        {
          "name": "DSA-4995",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4995"
        },
        {
          "name": "DSA-4996",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4996"
        },
        {
          "name": "[oss-security] 20211031 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/31/1"
        },
        {
          "name": "FEDORA-2021-131360fa9a",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/"
        },
        {
          "name": "FEDORA-2021-483d896d1d",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30851",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "tvOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Safari",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "watchOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212814",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212814"
            },
            {
              "name": "https://support.apple.com/en-us/HT212819",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212819"
            },
            {
              "name": "https://support.apple.com/en-us/HT212815",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212815"
            },
            {
              "name": "https://support.apple.com/en-us/HT212816",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212816"
            },
            {
              "name": "https://support.apple.com/kb/HT212869",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212869"
            },
            {
              "name": "DSA-4995",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-4995"
            },
            {
              "name": "DSA-4996",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-4996"
            },
            {
              "name": "[oss-security] 20211031 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/31/1"
            },
            {
              "name": "FEDORA-2021-131360fa9a",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/"
            },
            {
              "name": "FEDORA-2021-483d896d1d",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30851",
    "datePublished": "2021-08-24T18:49:17.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:13.383Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-30889 (GCVE-0-2021-30889)

Vulnerability from cvelistv5 – Published: 2021-08-24 18:49 – Updated: 2024-08-03 22:48

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity ?

No CVSS data available.

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Assigner

apple

References

5 references

URL	Tags
https://support.apple.com/en-us/HT212869	x_refsource_MISC
https://support.apple.com/en-us/HT212867	x_refsource_MISC
https://support.apple.com/en-us/HT212874	x_refsource_MISC
https://support.apple.com/en-us/HT212876	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/12/20/6	mailing-listx_refsource_MLIST

Impacted products

4 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: unspecified , < 15.1 (custom)
Apple	macOS	Affected: unspecified , < 12.0 (custom)
Apple	macOS	Affected: unspecified , < 8.1 (custom)
Apple	macOS	Affected: unspecified , < 15.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:48:13.274Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212869"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212867"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212874"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT212876"
          },
          {
            "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "8.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-20T15:06:47.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212869"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212867"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212874"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.apple.com/en-us/HT212876"
        },
        {
          "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2021-30889",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "iOS and iPadOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "12.0"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "8.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "macOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "15.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apple"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Processing maliciously crafted web content may lead to arbitrary code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT212869",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212869"
            },
            {
              "name": "https://support.apple.com/en-us/HT212867",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212867"
            },
            {
              "name": "https://support.apple.com/en-us/HT212874",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212874"
            },
            {
              "name": "https://support.apple.com/en-us/HT212876",
              "refsource": "MISC",
              "url": "https://support.apple.com/en-us/HT212876"
            },
            {
              "name": "[oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/12/20/6"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2021-30889",
    "datePublished": "2021-08-24T18:49:53.000Z",
    "dateReserved": "2021-04-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T22:48:13.274Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2022:1777

CVE-2021-45483 (GCVE-0-2021-45483)

CVE-2022-22589 (GCVE-0-2022-22589)

CVE-2022-22637 (GCVE-0-2022-22637)

CVE-2021-30848 (GCVE-0-2021-30848)

CVE-2021-30846 (GCVE-0-2021-30846)

CVE-2021-30884 (GCVE-0-2021-30884)

CVE-2022-22594 (GCVE-0-2022-22594)

CVE-2021-30809 (GCVE-0-2021-30809)

CVE-2021-30984 (GCVE-0-2021-30984)

CVE-2022-22620 (GCVE-0-2022-22620)

CVE-2021-30888 (GCVE-0-2021-30888)

CVE-2021-30936 (GCVE-0-2021-30936)

CVE-2021-30836 (GCVE-0-2021-30836)

CVE-2022-22590 (GCVE-0-2022-22590)

CVE-2021-30952 (GCVE-0-2021-30952)

CVE-2021-30890 (GCVE-0-2021-30890)

CVE-2021-30818 (GCVE-0-2021-30818)

CVE-2021-30887 (GCVE-0-2021-30887)

CVE-2021-30897 (GCVE-0-2021-30897)

CVE-2021-30849 (GCVE-0-2021-30849)

CVE-2021-30823 (GCVE-0-2021-30823)

CVE-2021-30934 (GCVE-0-2021-30934)

CVE-2021-45482 (GCVE-0-2021-45482)

CVE-2021-30954 (GCVE-0-2021-30954)

CVE-2021-45481 (GCVE-0-2021-45481)

CVE-2022-22592 (GCVE-0-2022-22592)

CVE-2021-30951 (GCVE-0-2021-30951)

CVE-2021-30953 (GCVE-0-2021-30953)

CVE-2021-30851 (GCVE-0-2021-30851)

CVE-2021-30889 (GCVE-0-2021-30889)

Tags

Sightings

Nomenclature