Opera vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2019-18624 Opera Mini for Android allows attackers to bypass intended restrictions on .apk file download/installation via an RTLO (aka Right to Left Override) approach, asCritical 9.8 · Oct 29, 2019
• CVE-2018-18913 Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a mHigh 7.8 · Mar 21, 2019
• CVE-2016-5101 Unspecified vulnerability in Opera Mail before 2016-02-16 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted e-mail messagHigh 8.8 · Jun 29, 2016
• CVE-2013-3211 Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue."High 10 · Apr 19, 2013
• CVE-2013-1638 Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.High 9.3 · Feb 8, 2013
• CVE-2013-1637 Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.High 9.3 · Feb 8, 2013
• CVE-2012-6470 Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service (memorHigh 9.3 · Jan 2, 2013
• CVE-2012-6468 Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long HHigh 9.3 · Jan 2, 2013
• CVE-2012-6465 Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed SVG image.High 9.3 · Jan 2, 2013
• CVE-2012-4145 Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact and attack vectors, High 10 · Aug 6, 2012
• CVE-2012-3561 Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denial of service (memoHigh 10 · Jun 14, 2012
• CVE-2012-3559 Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue."High 10 · Jun 14, 2012
• CVE-2012-3556 Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for High 9.3 · Jun 14, 2012
• CVE-2012-3555 Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conHigh 7.6 · Jun 14, 2012
• CVE-2011-4684 Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases."High 10 · Dec 7, 2011
• CVE-2011-4683 Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."High 10 · Dec 7, 2011
• CVE-2011-2628 Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory cHigh 10 · Jul 1, 2011
• CVE-2011-2610 Unspecified vulnerability in Opera before 11.50 has unknown impact and attack vectors, related to a "moderately severe issue."High 10 · Jul 1, 2011
• CVE-2011-0682 Integer truncation error in opera.dll in Opera before 11.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vHigh 9.3 · Jan 31, 2011
• CVE-2011-0450 The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisteHigh 7.6 · Jan 31, 2011
• CVE-2010-4587 Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for user-assisted remote aHigh 9.3 · Dec 21, 2010
• CVE-2010-4586 The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issHigh 10 · Dec 21, 2010
• CVE-2010-4581 Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."High 10 · Dec 21, 2010
• CVE-2010-4045 Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof thHigh 9.3 · Oct 21, 2010
• CVE-2010-3019 Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service (application crash or hang) via High 9.3 · Aug 16, 2010