Multiple vulnerabilities in Opera

Description

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

1. Data validation vulnerability in clipboard component can be exploited to obtaion sensitive information.
2. Implementation vulnerability in installer component can be exploited to potentially execute arbitrary code.
3. Policy enforcement vulnerability in developer tools can be exploited to bypass same origin policy.
4. Policy enforcement vulnerability in navigations component can be exploited to bypass same origin policy.
5. Policy enforcement vulnerability in downloads component can be exploited to bypass same origin policy.
6. Policy enforcement vulnerability in payments component can be exploited to bypass same origin policy.
7. Policy enforcement vulnerability in URL formatting component can be exploited to bypass same origin policy.
8. Use after free vulnerability in reader mode can be exploited to potentially cause denial of service.
9. Use after free vulnerability in WebRTC can be exploited to potentially cause denial of service.
10. Use after free vulnerability in Blink can be exploited ti potentially cause denial of service.
11. Policy enforcement vulnerability in tab strip component can be exploited to bypass same origin policy.
12. Security UI vulnerability in full screen component can be exploited to perform domain spoofing.
13. Security UI vulnerability in site information component can be exploited to perform domain spoofing.
14. Policy enforcement vulnerability in enterprice component can be exploited to bypass same origin policy.
15. Policy enforcement vulnerability in Blink can be exploited to bypass same origin policy.
16. Data validation vulnerability in media router can be exploited to bypass security restrictions.
17. Implementation vulnerability in full screen component can be exploited to potentially execute arbitrary code.
18. Implementation vulnerability in developer tools can be exploited ti potentially execute arbitrary code.
19. Type confusion vulnerability in V8 can be exploited to potentially cause denial of service.
20. Implementation vulnerability in sharing component can be exploited to potentially execute arbitrary code.
21. Data validation vulnerability in loader component can be exploited to bypass security restrictions.
22. Data validation vulnerability in ChromeDriver can be exploited to bypass security restrictions.
23. Use after free vulnerability in media component can be exploited to potentially cause denial of service.

Original advisories

• Changelog for Opera 69

• Stable Channel Update for Desktop

Related products

• Opera

CVE list

• CVE-2020-6465
  unknown
• CVE-2020-6471
  unknown
• CVE-2020-6478
  unknown
• CVE-2020-6484
  unknown
• CVE-2020-6483
  unknown
• CVE-2020-6467
  unknown
• CVE-2020-6468
  unknown
• CVE-2020-6489
  unknown
• CVE-2020-6473
  unknown
• CVE-2020-6470
  unknown
• CVE-2020-6490
  unknown
• CVE-2020-6469
  unknown
• CVE-2020-6480
  unknown
• CVE-2020-6477
  unknown
• CVE-2020-6479
  unknown
• CVE-2020-6487
  unknown
• CVE-2020-6475
  unknown
• CVE-2020-6491
  unknown
• CVE-2020-6486
  unknown
• CVE-2020-6474
  unknown
• CVE-2020-6485
  unknown
• CVE-2020-6481
  unknown
• CVE-2020-6466
  unknown
• CVE-2020-6488
  unknown
• CVE-2020-6476
  unknown
• CVE-2020-6482
  unknown
• CVE-2020-6472
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com