Opera vulnerabilities
303 vulnerabilities
Known vulnerabilities in Opera products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.
Products
7- Opera Browser279 vulnerabilities
- Opera17 vulnerabilities
- Opera Mini4 vulnerabilities
- Mini2 vulnerabilities
- Opera Mail1 vulnerabilities
- Opera Mobile1 vulnerabilities
- Opera Touch1 vulnerabilities
CVE-2018-16135operaopera_mini
EPSS score0.56%
The Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the Location Permission dialog via a crafted web site.CVE-2018-18913operaopera_browserEPSS score0.40%
Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location within the system. The issue lies in the loading of the shcore.dll and dcomp.dll files: these files are being searched for by the program in the same system-wide directory where the HTML file is executed.CVE-2018-6608operaopera_browserEPSS score3.24%
In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.CVE-2003-1420operaopera_browserEPSS score2.00%
Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header.CVE-2003-1388operaopera_browserEPSS score3.06%
Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension.CVE-2003-1397operaopera_browserEPSS score6.12%
The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.CVE-2003-1396operaopera_browserEPSS score9.09%
Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a filename with a long extension.CVE-2003-1387operaopera_browserEPSS score14.67%
Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.CVE-2003-0593operaopera_browserEPSS score2.95%
Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.CVE-2003-0870operaopera_browserEPSS score15.43%
Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name.CVE-2013-1637operaopera_browserEPSS score4.59%
Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.CVE-2013-1638operaopera_browserEPSS score8.04%
Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.CVE-2013-1618operaopera_browserEPSS score2.16%
The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.CVE-2013-1639operaopera_browserEPSS score0.49%
Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request.CVE-2013-4705operaopera_browserEPSS score1.79%
Cross-site scripting (XSS) vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging UTF-8 encoding.CVE-2013-3210operaopera_browserEPSS score1.67%
Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain.CVE-2013-3211operaopera_browserEPSS score1.73%
Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue."CVE-2021-23253operaopera_miniEPSS score0.76%
Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g. www.safe.opera.com.attacker.com. With the URL being left-aligned, the user will only see the front part (e.g. www.safe.opera.com…) The exact amount depends on the phone screen size but the attacker can craft a number of different domains and target different phones. Starting with version 53.1 Opera Mini displays long URLs with the top-level domain label aligned to the right of the address field which mitigates the issue.CVE-2015-4000chainguardchromium+96EPSS score99.86%
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.CVE-2007-2274operaopera_browserEPSS score8.20%
The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain.