Opera

Vendor:

First CVE: Dec 31, 2002 · Active for 23 years

Total CVEs

More Total CVEs than 49% of tracked products

2.6

Avg CVEs / Year

Higher CVE frequency than 60% of tracked products

6.8

Avg CVSS

Higher Avg CVSS than 9% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Opera over time

Volume of CVEsAvg CVSS Base Score

First CVE

Dec 31, 2002

23 years ago

Most Recent CVE

Dec 23, 2020

2,039 days ago

CVE Severity & Scoring

Opera21 CVEs

62%

38%

All CVEs352,294 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local1 (4.8%)

Network3 (14.3%)

Unknown17 (81.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low4 (19.0%)

High0 (0.0%)

Unknown17 (81.0%)

User Interaction

None2 (9.5%)

Unknown17 (81.0%)

Required2 (9.5%)

Privileges Required

Low1 (4.8%)

High0 (0.0%)

None3 (14.3%)

Unknown17 (81.0%)

Top CVEs

Signals from CVEs in this product scope (21 CVEs).

21 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2008-4696MEDIUM Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "option	Oct 23, 2008	4.3	55	NO	YES
CVE-2008-5178HIGH Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI. NOTE: this might overlap CVE-2008-5680.	Nov 20, 2008	9.3	53	NO	YES
CVE-2010-5227MEDIUM Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated	Sep 7, 2012	6.9	30	NO	YES
CVE-2008-1761HIGH Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory a	Apr 12, 2008	9.3	29	NO	NO
CVE-2008-4794HIGH Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a different vulnerability than CVE-2008-4696.	Oct 30, 2008	9.3	27	NO	NO
CVE-2008-3079HIGH Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors.	Jul 9, 2008	10.0	27	NO	NO
CVE-2008-4293HIGH Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial of service (crash) and possibly execute	Sep 27, 2008	10.0	26	NO	NO
CVE-2008-1764HIGH Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs."	Apr 12, 2008	9.3	26	NO	NO
CVE-2008-4695HIGH Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launch	Oct 23, 2008	9.3	25	NO	NO
CVE-2008-5679HIGH The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption	Dec 19, 2008	9.3	24	NO	NO

View all 21 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (21 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

1 CVE

4.8% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

5 CVEs

23.8% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (21 CVEs).

Media Mentions

Signals from CVEs in this product scope (21 CVEs).

Top CNAs Publishing CVEs For Opera

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
9.62	1	9.3	31.5%	1
9.61	1	9.3	3.3%	0
9.60	1	9.3	3.3%	0
9.6	2	9.3	2.6%	0
9.52	2	9.3	4.6%	0
9.51	6	6.8	10.8%	2
9.50	6	8.0	10.4%	2
9.27	6	7.8	11.4%	2
9.26	6	7.8	11.4%	2
9.25	8	8.1	9.7%	2
9.24	8	8.1	9.7%	2
9.23	9	7.9	8.8%	2
9.22	8	8.1	9.7%	2
9.21	9	7.9	8.8%	2
9.20	9	7.9	9.3%	2
9.1tp	1	9.3	2.0%	0
9.10	9	7.9	8.8%	2
9.02	9	7.9	8.8%	2
9.01	8	7.7	8.9%	2
9.0	8	7.9	9.7%	2