Information disclosure

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

CVE-2018-6608

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

CVE-2018-6608

The CVE-2018-6608 entry concerns Opera’s WebRTC component, specifically version 51.0.2830.55. The vulnerability allows disclosure of a private client IP address in a STUN request after visiting a site attempting to enumerate complete client information (e.g., ip.voidsec.com). Technical details ac...

CVE-2018-6608

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

CVE-2018-6608: Exposure of Sensitive Information to an Unauthorized Actor

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

PT-2018-17666

Name of the Vulnerable Software and Affected Versions Opera version 51.0.2830.55 Description The issue allows a website to gather complete client information, potentially disclosing a private IP address in a STUN request after visiting a site, such as https://ip.voidsec.com, that attempts to...

openSUSE Security Update : opera (openSUSE-2018-307)

This update for Opera to version fixes the following issues : - boo1086610: Version update to 52.0.2871.30, including all upstream fixes and improvements - The Chromium engine updates contain various security fixes The following packaging changes are included : - .desktop file was updated to comp...

PT-2018-17348

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue allows a remote attacker to leak cross-origin data via a crafted HTML page, due to displacement map filters being applied to cross-origin...

PT-2018-17345

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera affected versions not specified Description The issue allows a remote attacker to bypass OS level controls via a crafted HTML page due to the failure to apply Mark-of-the-Web in downloads...

PT-2018-17350

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue involves the inappropriate sharing of TEXTURE 2D ARRAY/TEXTURE 3D data between tabs in WebGL, allowing a remote attacker to leak...

PT-2018-17335

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera affected versions not specified Description The issue is related to the incorrect use of mojo::WrapSharedMemoryHandle in Mojo, allowing a remote attacker who has compromised the renderer...

PT-2018-17337

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to a lack of CORS checking by ResourceFetcher/ResourceLoader in Blink, which allowed a remote attacker to leak cross-origin da...

PT-2018-17338

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to incorrect IPC serialization in Skia, which allowed a remote attacker to potentially exploit heap corruption via a crafted...

PT-2018-17341

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue concerns a lack of Content Security Policy CSP enforcement on WebUI pages in Blink, allowing an attacker to bypass CSP. This can occur if...

PT-2018-17342

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to an integer overflow in Skia, which allows a remote attacker to perform an out of bounds memory read via a crafted HTML page...

PT-2018-17349

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to the incorrect handling of confusable characters in the Omnibox, which is the URL bar in Google Chrome and Opera. This allow...

PT-2018-17351

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to a lack of access control checks in Instrumentation, allowing a remote attacker who has compromised the renderer process to...

PT-2018-17347

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to insufficient encoding of URL fragment identifiers in Blink, which allowed a remote attacker to perform a DOM based XSS atta...

PT-2018-17343

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to an integer overflow leading to use after free in PDFium, which can potentially allow a remote attacker to exploit heap...

PT-2018-17352

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera affected versions not specified Description The issue allows an attacker who convinces a user to install a malicious extension or open the Developer Console to inject arbitrary scripts or HTM...