Opera
Vendor:
First CVE: Dec 31, 2002 · Active for 23 years
21
Total CVEs
More Total CVEs than 93% of tracked products
2.6
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 42% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Opera over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 31, 2002
23 years ago
Most Recent CVE
Dec 23, 2020
2,039 days ago
CVE Severity & Scoring
Opera21 CVEs
62%
38%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local1 (4.8%)
Network3 (14.3%)
Unknown17 (81.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (19.0%)
High0 (0.0%)
Unknown17 (81.0%)
User Interaction
None2 (9.5%)
Unknown17 (81.0%)
Required2 (9.5%)
Privileges Required
Low1 (4.8%)
High0 (0.0%)
None3 (14.3%)
Unknown17 (81.0%)
Top CVEs
Signals from CVEs in this product scope (21 CVEs).
21 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-4696MEDIUM Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "option | Oct 23, 2008 | 4.3 | 55 | NO | YES |
CVE-2008-5178HIGH Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI. NOTE: this might overlap CVE-2008-5680. | Nov 20, 2008 | 9.3 | 53 | NO | YES |
CVE-2010-5227MEDIUM Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated | Sep 7, 2012 | 6.9 | 30 | NO | YES |
CVE-2008-1761HIGH Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory a | Apr 12, 2008 | 9.3 | 29 | NO | NO |
CVE-2008-4794HIGH Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a different vulnerability than CVE-2008-4696. | Oct 30, 2008 | 9.3 | 27 | NO | NO |
CVE-2008-3079HIGH Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors. | Jul 9, 2008 | 10.0 | 27 | NO | NO |
CVE-2008-4293HIGH Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial of service (crash) and possibly execute | Sep 27, 2008 | 10.0 | 26 | NO | NO |
CVE-2008-1764HIGH Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs." | Apr 12, 2008 | 9.3 | 26 | NO | NO |
CVE-2008-4695HIGH Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launch | Oct 23, 2008 | 9.3 | 25 | NO | NO |
CVE-2008-5679HIGH The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption | Dec 19, 2008 | 9.3 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (21 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
4.8% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
5 CVEs
23.8% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (21 CVEs).
Media Mentions
Signals from CVEs in this product scope (21 CVEs).
Top CNAs Publishing CVEs For Opera
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.62 | 1 | 9.3 | 31.5% | 0 | 1 |
| 9.61 | 1 | 9.3 | 3.3% | 0 | 0 |
| 9.60 | 1 | 9.3 | 3.3% | 0 | 0 |
| 9.6 | 2 | 9.3 | 2.6% | 0 | 0 |
| 9.52 | 2 | 9.3 | 4.6% | 0 | 0 |
| 9.51 | 6 | 6.8 | 10.8% | 0 | 2 |
| 9.50 | 6 | 8.0 | 10.4% | 0 | 2 |
| 9.27 | 6 | 7.8 | 11.4% | 0 | 2 |
| 9.26 | 6 | 7.8 | 11.4% | 0 | 2 |
| 9.25 | 8 | 8.1 | 9.7% | 0 | 2 |
| 9.24 | 8 | 8.1 | 9.7% | 0 | 2 |
| 9.23 | 9 | 7.9 | 8.8% | 0 | 2 |
| 9.22 | 8 | 8.1 | 9.7% | 0 | 2 |
| 9.21 | 9 | 7.9 | 8.8% | 0 | 2 |
| 9.20 | 9 | 7.9 | 9.3% | 0 | 2 |
| 9.1tp | 1 | 9.3 | 2.0% | 0 | 0 |
| 9.10 | 9 | 7.9 | 8.8% | 0 | 2 |
| 9.02 | 9 | 7.9 | 8.8% | 0 | 2 |
| 9.01 | 8 | 7.7 | 8.9% | 0 | 2 |
| 9.0 | 8 | 7.9 | 9.7% | 0 | 2 |