Opera Browser
Vendor:
First CVE: Nov 17, 2003 · Active for 22 years
285
Total CVEs
More Total CVEs than 100% of tracked products
16.8
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
5.8
Avg CVSS
Higher Avg CVSS than 18% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Opera Browser over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 17, 2003
22 years ago
Most Recent CVE
Mar 21, 2019
2,682 days ago
CVE Severity & Scoring
Opera Browser285 CVEs
71%
24%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local1 (0.4%)
Network8 (2.8%)
Unknown276 (96.8%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (2.5%)
High2 (0.7%)
Unknown276 (96.8%)
User Interaction
None4 (1.4%)
Unknown276 (96.8%)
Required5 (1.8%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None9 (3.2%)
Unknown276 (96.8%)
Top CVEs
Signals from CVEs in this product scope (285 CVEs).
285 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-mi | May 21, 2015 | 3.7 | 76 | NO | YES |
CVE-2011-3389MEDIUM The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data b | Sep 6, 2011 | 4.3 | 71 | NO | YES |
CVE-2011-2628HIGH Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vecto | Jul 1, 2011 | 10.0 | 50 | NO | YES |
CVE-2010-1349HIGH Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow. | Apr 12, 2010 | 10.0 | 49 | NO | YES |
CVE-2011-4684HIGH Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases." | Dec 7, 2011 | 10.0 | 42 | NO | YES |
CVE-2012-6470HIGH Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a m | Jan 2, 2013 | 9.3 | 40 | NO | YES |
CVE-2008-1762HIGH Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, whi | Apr 12, 2008 | 9.3 | 40 | NO | YES |
CVE-2003-1387HIGH Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username. | Dec 31, 2003 | 7.5 | 39 | NO | YES |
CVE-2003-0870HIGH Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name. | Nov 17, 2003 | 7.5 | 39 | NO | YES |
CVE-2007-0126HIGH Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) m | Jan 9, 2007 | 9.3 | 38 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (285 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
2 CVEs
0.7% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
26 CVEs
9.1% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (285 CVEs).
Media Mentions
Signals from CVEs in this product scope (285 CVEs).
Top CNAs Publishing CVEs For Opera Browser
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.64 | 133 | 5.5 | 2.4% | 0 | 4 |
| 9.63 | 127 | 5.5 | 2.3% | 0 | 3 |
| 9.62 | 128 | 5.5 | 2.3% | 0 | 3 |
| 9.61 | 134 | 5.6 | 2.4% | 0 | 4 |
| 9.60 | 136 | 5.6 | 2.3% | 0 | 4 |
| 9.52 | 148 | 5.6 | 2.4% | 0 | 7 |
| 9.51 | 148 | 5.6 | 2.4% | 0 | 6 |
| 9.50 | 149 | 5.6 | 2.4% | 0 | 6 |
| 9.27 | 148 | 5.6 | 2.4% | 0 | 6 |
| 9.26 | 148 | 5.6 | 2.4% | 0 | 6 |
| 9.25 | 149 | 5.7 | 2.4% | 0 | 7 |
| 9.24 | 154 | 5.7 | 2.4% | 0 | 7 |
| 9.23 | 158 | 5.7 | 2.4% | 0 | 7 |
| 9.22 | 170 | 5.7 | 2.5% | 0 | 7 |
| 9.21 | 174 | 5.7 | 2.4% | 0 | 7 |
| 9.20 | 174 | 5.7 | 2.5% | 0 | 7 |
| 9.2 | 2 | 6.4 | 13.9% | 0 | 2 |
| 9.12 | 150 | 5.8 | 2.5% | 0 | 7 |
| 9.10 | 179 | 5.8 | 2.5% | 0 | 8 |
| 9.02 | 176 | 5.8 | 2.5% | 0 | 8 |