Vulnerability Spotlight: Use-after-free vulnerability in Web Kit

Summary: Cisco Talos discovered a use-after-free vulnerability in WebKit's GraphicsContext function, tracked as TALOS-2021-1238/CVE-2021-21779, which a specially crafted web page can trigger to cause a potential information leak and memory corruption. Talos confirmed WebKitGTK version 2.30.4 is affected, worked with WebKit on a fix and update, and published Snort rules 57134 and 57135 to detect exploitation attempts.
Bottom line: The trigger is a user visiting a malicious web page, so exploitation depends on a single browsing action rather than any misconfiguration on your side, and the outcome is a potential information leak plus memory corruption.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-21779
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026