KLA11714
Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, cause denial of service.

Below is a complete list of vulnerabilities:

1. Cross-origin data leak vulnerability can be exploited to arbitrary code execution;
2. Security UI vulnerability in full screen mode can be exploited remotely via a crafted web page to perform domain spoofing;
3. URL spoof vulnerability in navigation can be exploited to arbitrary code execution;
4. Out-of-bounds read vulnerability in PDFium can be exploited to arbitrary code execution;
5. Unspecified vulnerability in libexpat can be exploited remotely via specially designed XML-file to obtain sensitive information;
6. File download protection bypass vulnerability can be exploited to arbitrary code execution;
7. Privilege elevation vulnerability in Installer can be exploited to arbitrary code execution;
8. Use-after-free vulnerability in media can be exploited to arbitrary code execution;
9. IDN spoof vulnerability can be exploited to arbitrary code execution;
10. CSP bypass vulnerability can be exploited to arbitrary code execution;
11. CSS injection vulnerability can be exploited to arbitrary code execution;
12. Cross-context information leak vulnerability can be exploited to arbitrary code execution;
13. Extension permission bypass vulnerability can be exploited to arbitrary code execution;
14. Service worker state error vulnerability can be exploited to arbitrary code execution;
15. Address bar spoofing vulnerability can be exploited to arbitrary code execution;
16. Use after free vulnerability in content delivery manager can be exploited remotely via a crafted web page to potentially cause denial of service;
17. File storage disclosure vulnerability can be exploited to arbitrary code execution;
18. URL bar spoofing vulnerability can be exploited to arbitrary code execution;
19. Buffer overrun vulnerability in Blink can be exploited to arbitrary code execution;
20. HTTP authentication spoof vulnerability can be exploited to arbitrary code execution;

Opera erlier than 65.0.3467.24

Update to the latest version
Download Opera

Changelog for Opera 65
Stable Channel Update for Desktop