---

CVE-2021-21806 - log back

CVE-2021-21806 edited at 25 Jul 2021 12:31:44
References	https://webkitgtk.org/security/WSA-2021-0004.html#CVE-2021-21806 + https://talosintelligence.com/vulnerability_reports/TALOS-2020-1214

CVE-2021-21806 created at 25 Jul 2021 12:14:27
Severity	+ Medium
Remote	+ Remote
Type	+ Arbitrary code execution
Description	+ A security issue has been found in WebKitGTK and WPE WebKit before 2.30.6. An exploitable use-after-free vulnerability exists in WebKit. A specially crafted HTML web page can cause a use-after-free condition, resulting in remote code execution. The victim needs to visit a malicious web site to trigger the vulnerability.
References	+ https://webkitgtk.org/security/WSA-2021-0004.html#CVE-2021-21806
Notes