Kaspersky ID:
KLA12434
Detect Date:
12/21/2021
Updated:
01/27/2022

Description

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

  1. Heap buffer overflow vulnerability in Task Manager can be exploited to execute arbitrary code or cause denial of service.
  2. Use after free vulnerability in Printing can be exploited to cause denial of service or execute arbitrary code.
  3. Use after free vulnerability in site isolation can be exploited to cause denial of service or execute arbitrary code.
  4. Implementation vulnerability in Service Worker API can be exploited to cause denial of service.
  5. Use after free vulnerability in Omnibox can be exploited to cause denial of service or execute arbitrary code.
  6. Heap buffer overflow vulnerability in DevTools can be exploited to execute arbitrary code or cause denial of service.
  7. Use after free vulnerability in Data Transfer can be exploited to cause denial of service or execute arbitrary code.
  8. Implementation vulnerability in Autofill can be exploited to cause denial of service.
  9. Use after free vulnerability in web packaging can be exploited to cause denial of service or execute arbitrary code.
  10. Heap buffer overflow vulnerability in PDFium can be exploited to execute arbitrary code or cause denial of service.
  11. Use after free vulnerability in Optimization Guide can be exploited to cause denial of service or execute arbitrary code.
  12. Use after free vulnerability in Scheduling can be exploited to cause denial of service or execute arbitrary code.
  13. Use after free vulnerability in Vulkan can be exploited to cause denial of service or execute arbitrary code.
  14. Use after free vulnerability in Bookmarks can be exploited to cause denial of service or execute arbitrary code.
  15. Implementation vulnerability in Fenced Frames can be exploited to cause denial of service.
  16. Implementation vulnerability in Storage can be exploited to cause denial of service.
  17. Use after free vulnerability in safe browsing can be exploited to cause denial of service or execute arbitrary code.
  18. Use after free vulnerability in Text Input Method Editor can be exploited to cause denial of service or execute arbitrary code.
  19. Implementation vulnerability in push messaging can be exploited to cause denial of service.

Original advisories

Related products

CVE list

  • CVE-2022-0305
    unknown
  • CVE-2022-0306
    unknown
  • CVE-2022-0293
    unknown
  • CVE-2022-0298
    unknown
  • CVE-2022-0290
    unknown
  • CVE-2022-0296
    unknown
  • CVE-2022-0307
    unknown
  • CVE-2022-0304
    unknown
  • CVE-2022-0302
    unknown
  • CVE-2022-0310
    unknown
  • CVE-2022-0308
    unknown
  • CVE-2022-0294
    unknown
  • CVE-2022-0301
    unknown
  • CVE-2022-0289
    unknown
  • CVE-2022-0311
    unknown
  • CVE-2022-0295
    unknown
  • CVE-2022-0292
    unknown
  • CVE-2022-0300
    unknown
  • CVE-2022-0291
    unknown
  • CVE-2022-0297
    unknown
  • CVE-2022-0309
    unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.