opera vulnerabilities and fixes

Recent CVEs affecting opera, with upgrade or downgrade steps. 20 tracked.

opera has 20 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2020-12-23. Highest priority: CVE-2008-5178 (score 62/100).

• CVE-2020-6159 MEDIUM 6.1 UPGRADE URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cros
• CVE-2019-12278 MEDIUM 4.3 DOWNGRADE Opera through 53 on Android allows Address Bar Spoofing
• CVE-2016-7152 MEDIUM 5.3 MITIGATE MITIGATE The HTTPS protocol does not consider the role of the TCP congestion window in providing information about cont
• CVE-2010-5227 MEDIUM 6.9 UPGRADE Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan h
• CVE-2009-2068 MEDIUM 5.8 DOWNGRADE Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows m
• CVE-2008-5679 HIGH 9.3 UPGRADE The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web
• CVE-2008-5428 MEDIUM 4.3 DOWNGRADE Opera 9.51 on Windows XP does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and
• CVE-2008-5178 HIGH 9.3 DOWNGRADE Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a lo
• CVE-2008-4795 MEDIUM 4.3 UPGRADE The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a fram
• CVE-2008-4794 HIGH 9.3 UPGRADE Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a
• CVE-2008-4696 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject a
• CVE-2008-4695 HIGH 9.3 UPGRADE Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by
• CVE-2008-4293 HIGH 10.0 UPGRADE Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remot
• CVE-2008-3172 MEDIUM 6.8 MITIGATE Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as
• CVE-2008-3079 HIGH 10.0 UPGRADE Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unkno
• CVE-2008-1764 HIGH 9.3 UPGRADE Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard hand
• CVE-2008-1761 HIGH 9.3 UPGRADE Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary
• CVE-2003-1561 MEDIUM 4.3 MITIGATE Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, whic
• CVE-2002-2414 MEDIUM 4.3 DOWNGRADE DOWNGRADE Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global cer
• CVE-2002-2312 MEDIUM 5.8 DOWNGRADE Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to

FAQ

How do I fix opera vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is opera being exploited right now?

None of the tracked opera CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which opera CVE should I patch first?

CVE-2008-5178 currently ranks highest (62/100): Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a lo.

RSS feed for opera · ← Back to latest CVEs