Поиск уязвимостей
Количество 14
Количество 14
GHSA-4ch5-gr7v-q6wq
BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133.
CVE-2021-42762
BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133.
CVE-2021-42762
BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133.
CVE-2021-42762
BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133.
CVE-2021-42762
BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allow ...
openSUSE-SU-2021:3603-1
Security update for webkit2gtk3
openSUSE-SU-2021:1454-1
Security update for webkit2gtk3
SUSE-SU-2021:3768-1
Security update for webkit2gtk3
SUSE-SU-2021:3603-1
Security update for webkit2gtk3
BDU:2024-05804
Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit, связанная с небезопасным управлением привилегиями, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
ROS-20240726-06
Уязвимость webkit2gtk3
ALT-PU-2021-3327
ALT-PU-2021-3327: package `libwebkitgtk4` update to version 2.34.1-alt1
SUSE-SU-2021:3769-1
Security update for webkit2gtk3
ALT-PU-2022-2162
ALT-PU-2022-2162: package `libwebkitgtk4` update to version 2.36.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
GHSA-4ch5-gr7v-q6wq BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133. | 1% Низкий | больше 4 лет назад | ||
CVE-2021-42762 BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133. | CVSS3: 5.3 | 1% Низкий | около 5 лет назад | |
CVE-2021-42762 BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133. | CVSS3: 5.3 | 1% Низкий | около 5 лет назад | |
CVE-2021-42762 BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133. | CVSS3: 5.3 | 1% Низкий | около 5 лет назад | |
CVE-2021-42762 BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allow ... | CVSS3: 5.3 | 1% Низкий | около 5 лет назад | |
openSUSE-SU-2021:3603-1 Security update for webkit2gtk3 | 1% Низкий | около 5 лет назад | ||
openSUSE-SU-2021:1454-1 Security update for webkit2gtk3 | 1% Низкий | около 5 лет назад | ||
SUSE-SU-2021:3768-1 Security update for webkit2gtk3 | 1% Низкий | почти 5 лет назад | ||
SUSE-SU-2021:3603-1 Security update for webkit2gtk3 | 1% Низкий | около 5 лет назад | ||
BDU:2024-05804 Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit, связанная с небезопасным управлением привилегиями, позволяющая нарушителю оказать воздействие на целостность защищаемой информации | CVSS3: 5.3 | 1% Низкий | около 5 лет назад | |
ROS-20240726-06 Уязвимость webkit2gtk3 | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад | |
ALT-PU-2021-3327 ALT-PU-2021-3327: package `libwebkitgtk4` update to version 2.34.1-alt1 | CVSS3: 5.3 | 1% Низкий | почти 5 лет назад | |
SUSE-SU-2021:3769-1 Security update for webkit2gtk3 | почти 5 лет назад | |||
ALT-PU-2022-2162 ALT-PU-2022-2162: package `libwebkitgtk4` update to version 2.36.3-alt1 | CVSS3: 8.8 | больше 4 лет назад |
Уязвимостей на страницу