Multiple vulnerabilities in Opera

Description

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Out of bounds read and write vulnerability in PDFium component can be exploited to potentially cause denial of service.
2. Use after free vulnerability in payments component can be exploited to potentially cause denial of service.
3. Data validation vulnerability in URL formatting component can be exploited to bypass security restrictions.
4. Use after free in task schedulin can be exploited to potentially cause denial of service.
5. Use after free in storage can be exploited to potentially cause denial of service.
6. Use after free vulnerability in ANGLE component can be exploited to potentially cause denial of service.

Original advisories

• Changelog for Opera 68

• Stable Channel Update for Desktop
• Stable Channel Update for Desktop

Exploitation

Public exploits exist for this vulnerability.

Related products

• Opera

CVE list

• CVE-2020-6458
  critical
• CVE-2020-6459
  critical
• CVE-2020-6460
  high
• CVE-2020-6462
  critical
• CVE-2020-6461
  critical
• CVE-2020-6463
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com