Unknown · Wpe Webkit · CVE-2021-42762
**Name of the Vulnerable Software and Affected Versions**
WebKitGTK versions prior to 2.34.1
WPE WebKit versions prior to 2.34.1
**Description**
The issue is related to insecure privilege management in WebKitGTK and WPE WebKit, allowing a remote attacker to impact the integrity of protected information. It involves a limited sandbox bypass, where a sandboxed process can trick host processes into thinking it is not confined by the sandbox. This is achieved by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined.
**Recommendations**
For WebKitGTK versions prior to 2.34.1, update to version 2.34.1 or later.
For WPE WebKit versions prior to 2.34.1, update to version 2.34.1 or later.
As a temporary workaround, consider restricting access to the `BubblewrapLauncher.cpp` module until a patch is available.