{
  "cveId": "CVE-2021-42762",
  "url": "https://patchblox.com/security/cve/CVE-2021-42762",
  "summary": "CVE-2021-42762 is fixed in 7 products on 1 platform, first by gir1.2-javascriptcoregtk-4.0 2.34.1-1ubuntu1, released October 20, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libwebkit2gtk-4.0-37: BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandbo...",
  "description": "BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133.",
  "published": "2021-10-20T12:15:00Z",
  "severity": "Medium",
  "epss": 0.00539,
  "epssPercentile": 0.45614,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "gir1.2-javascriptcoregtk-4.0",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.34.1-0ubuntu0.20.04.1",
      "fix": "gir1.2-javascriptcoregtk-4.0 2.34.1-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-gir1.2-javascriptcoregtk-4.0-2.34.1-0ubuntu0.20.04.1",
      "released": "2021-12-24T17:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-javascriptcoregtk-4.0",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.34.1-1ubuntu1",
      "fix": "gir1.2-javascriptcoregtk-4.0 2.34.1-1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-gir1.2-javascriptcoregtk-4.0-2.34.1-1ubuntu1",
      "released": "2021-10-20T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-webkit2-4.0",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.34.1-0ubuntu0.20.04.1",
      "fix": "gir1.2-webkit2-4.0 2.34.1-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-gir1.2-webkit2-4.0-2.34.1-0ubuntu0.20.04.1",
      "released": "2021-12-24T17:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-webkit2-4.0",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.34.1-1ubuntu1",
      "fix": "gir1.2-webkit2-4.0 2.34.1-1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-gir1.2-webkit2-4.0-2.34.1-1ubuntu1",
      "released": "2021-10-20T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.0-18",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.34.1-0ubuntu0.20.04.1",
      "fix": "libjavascriptcoregtk-4.0-18 2.34.1-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libjavascriptcoregtk-4.0-18-2.34.1-0ubuntu0.20.04.1",
      "released": "2021-12-24T17:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.0-18",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.34.1-1ubuntu1",
      "fix": "libjavascriptcoregtk-4.0-18 2.34.1-1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libjavascriptcoregtk-4.0-18-2.34.1-1ubuntu1",
      "released": "2021-10-20T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.0-bin",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.34.1-0ubuntu0.20.04.1",
      "fix": "libjavascriptcoregtk-4.0-bin 2.34.1-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libjavascriptcoregtk-4.0-bin-2.34.1-0ubuntu0.20.04.1",
      "released": "2021-12-24T17:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.0-bin",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.34.1-1ubuntu1",
      "fix": "libjavascriptcoregtk-4.0-bin 2.34.1-1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libjavascriptcoregtk-4.0-bin-2.34.1-1ubuntu1",
      "released": "2021-10-20T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libwebkit2gtk-4.0-37",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.34.1-0ubuntu0.20.04.1",
      "fix": "libwebkit2gtk-4.0-37 2.34.1-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libwebkit2gtk-4.0-37-2.34.1-0ubuntu0.20.04.1",
      "released": "2021-12-24T17:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libwebkit2gtk-4.0-37",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.34.1-1ubuntu1",
      "fix": "libwebkit2gtk-4.0-37 2.34.1-1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libwebkit2gtk-4.0-37-2.34.1-1ubuntu1",
      "released": "2021-10-20T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libwebkit2gtk-4.0-37-gtk2",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.34.1-0ubuntu0.20.04.1",
      "fix": "libwebkit2gtk-4.0-37-gtk2 2.34.1-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libwebkit2gtk-4.0-37-gtk2-2.34.1-0ubuntu0.20.04.1",
      "released": "2021-12-24T17:15:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk-driver",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.34.1-0ubuntu0.20.04.1",
      "fix": "webkit2gtk-driver 2.34.1-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-webkit2gtk-driver-2.34.1-0ubuntu0.20.04.1",
      "released": "2021-12-24T17:15:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk-driver",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.34.1-1ubuntu1",
      "fix": "webkit2gtk-driver 2.34.1-1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-webkit2gtk-driver-2.34.1-1ubuntu1",
      "released": "2021-10-20T12:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}