Opera: CVE Program partner

CVEs, 365 days16 all time, 0 rejected

Quality33%median 99%

CVSS by the CNA0%share of records

CWE0%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA100%lower is better

Organisation	Opera Norway AS
Role	CNA
Type	Vendor, Open Source
Reports to	mitre
Scope	All Opera group products.
Advisories	https://security.opera.com/en/advisories/

CVE-2025-12501 2025-10-31
Integer overflow in GameMaker IDE below 2024.14.0 version can lead to can lead to application crashes through denial-of-service attacks (DoS). GameMaker users w
CVE-2020-6158 2025-02-21
Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into
CVE-2021-23253 2021-01-11
Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g.
CVE-2020-6159 2020-12-23
URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cross-site scripting (XSS) attacks, but in certain cir
CVE-2020-6157 2020-11-13
Opera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into sh
CVE-2019-19788 2019-12-18
Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. By using a service working inside a sandboxed iframe it

Opera