Opera Mini

opera_mini

Vendor: Opera • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-16135 1Opera 1Opera Mini Apr 14, 2025 Dec 26, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 The Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the Location Permission dialog via a crafted web site.
CVE-2021-23253 1Opera 1Opera Mini Jun 17, 2026 Jan 11, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g. www.safe.opera.com.attacker.com. With the URL being left-ali...Show more Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g. www.safe.opera.com.attacker.com. With the URL being left-aligned, the user will only see the front part (e.g. www.safe.opera.com…) The exact amount depends on the phone screen size but the attacker can craft a number of different domains and target different phones. Starting with version 53.1 Opera Mini displays long URLs with the top-level domain label aligned to the right of the address field which mitigates the issue.Show less
CVE-2016-4075 1Opera 2Opera Browser Opera Mini May 13, 2026 Apr 21, 2017 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL.
CVE-2012-5180 1Opera 2Opera Mini Opera Mobile Apr 29, 2026 Dec 26, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.