Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2021-21806

Published: 08/07/2021 Updated: 19/04/2022
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Webkitgtk

Vulnerability Summary

A security issue has been found in WebKitGTK and WPE WebKit prior to 2.30.6. An exploitable use-after-free vulnerability exists in WebKit. A specially crafted HTML web page can cause a use-after-free condition, resulting in remote code execution. The victim needs to visit a malicious web site to trigger the vulnerability.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

webkitgtk webkitgtk 2.30.3

Vendor Advisories

Red Hat: CVE-2021-21806
No description is available for this CVE ...
Arch Linux Issues:
A security issue has been found in WebKitGTK and WPE WebKit before 2306 An exploitable use-after-free vulnerability exists in WebKit A specially crafted HTML web page can cause a use-after-free condition, resulting in remote code execution The victim needs to visit a malicious web site to trigger the vulnerability ...

Mailing Lists

Full Disclosure: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0004
------------------------------------------------------------------------ WebKitGTK and WPE WebKit Security Advisory WSA-2021-0004 ------------------------------------------------------------------------ Date reported : July 23, 2021 Advisory ID : WSA-2021-0004 WebKitGTK Advisory URL : webkitgtkorg/se ...

References

CWE-416https://talosintelligence.com/vulnerability_reports/TALOS-2020-1214http://www.openwall.com/lists/oss-security/2021/07/23/1https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2021-21806https://security.archlinux.org/CVE-2021-21806
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-31805dosCVE-2022-26727CVE-2022-26712CVE-2022-1529CVE-2022-20807template injectionCVE-2022-26690cross-site scripting
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook