CVE-2012-3555

CVE-2012-3555 describes a vulnerability in Opera versions prior to 11.65, where the browser fails to associate keyboard sequences with visible windows. This flaw, dubbed "hidden keyboard navigation," could be leveraged by user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code through a specially crafted website. With a CVSS score of 7.6, this vulnerability is considered high severity, requiring user interaction (AC:H) but allowing for complete compromise of confidentiality, integrity, and availability (C:C/I:C/A:C) from a network-based attack (AV:N). Despite its potential impact, the EPSS score is very low, indicating a minimal likelihood of exploitation. There is no evidence of active exploitation, nor are there any known public exploits available in Metasploit, Nuclei, or ExploitDB. Furthermore, the vulnerability has garnered no community discussion or media coverage, suggesting a lack of widespread attention or exploitation in the wild.