OPENSUSE-SU-2020:1952-1

Vulnerability from csaf_opensuse - Published: 2020-11-17 11:28 - Updated: 2026-09-20 19:16
Summary
Security update for opera
Severity
Important
Notes
Title of the patch: Security update for opera
Description of the patch: This update for opera fixes the following issues: Opera was updated to version 72.0.3815.320 - CHR-8177 Update chromium on desktop-stable-86-3815 to 86.0.4240.183 - DNA-89748 ‘Manage Extensions’ dialog is displayed with preloaded extensions - DNA-89766 Address bar does not respond to actions - The update to chromium 86.0.4240.183 fixes following issues: CVE-2020-16004, CVE-2020-16005, CVE-2020-16006, CVE-2020-16007, CVE-2020-16008, CVE-2020-16009, CVE-2020-16011 - Update to version 72.0.3815.200 - DNA-87150 Speed Dial tile can’t be dragged to proper place - DNA-89632 Improve hovering over icons - DNA-89647 [Light mode] Wrong URL color in ‘Add Site’ section - DNA-89791 Typo in Spanish - The update to chromium 86.0.4240.111 fixes following issues: CVE-2020-16000, CVE-2020-16001, CVE-2020-16002, CVE-2020-15999, CVE-2020-16003 - Complete Opera 72.0 changelog at: https://blogs.opera.com/desktop/changelog-for-72/ - Update to version 71.0.3770.271 - DNA-88353 Crash at opera::TabCyclerView::HighlightContents (content::WebContents*, bool) - DNA-89177 Device update request should only be called when FCM token has changed - DNA-89186 Handle device expired case in all server calls - DNA-89202 Pages are rendered in dark mode when force dark mode prefs were synced from Opera GX - DNA-89247 [Mac] Fullscreen video broken if sidebar is hidden - DNA-89298 Some elements of VPN popup are misaligned to design - DNA-89305 Crash after closing Downloads pop-up
Patchnames: openSUSE-2020-1952
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2020-15999
8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2020-16000
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact important
CVE-2020-16001
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact important
CVE-2020-16002
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact important
CVE-2020-16003
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact important
CVE-2020-16004
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact critical
CVE-2020-16005
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact critical
CVE-2020-16006
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact critical
CVE-2020-16007
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact critical
CVE-2020-16008
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact critical
CVE-2020-16009
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact critical
CVE-2020-16011
9.6 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Recommended 2 products, the same list as for CVE-2020-15999
Threats
Impact critical
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://lists.opensuse.org/archives/list/security… self
https://lists.opensuse.org/archives/list/security… self
https://www.suse.com/security/cve/CVE-2020-15999/ self
https://www.suse.com/security/cve/CVE-2020-16000/ self
https://www.suse.com/security/cve/CVE-2020-16001/ self
https://www.suse.com/security/cve/CVE-2020-16002/ self
https://www.suse.com/security/cve/CVE-2020-16003/ self
https://www.suse.com/security/cve/CVE-2020-16004/ self
https://www.suse.com/security/cve/CVE-2020-16005/ self
https://www.suse.com/security/cve/CVE-2020-16006/ self
https://www.suse.com/security/cve/CVE-2020-16007/ self
https://www.suse.com/security/cve/CVE-2020-16008/ self
https://www.suse.com/security/cve/CVE-2020-16009/ self
https://www.suse.com/security/cve/CVE-2020-16011/ self
https://www.suse.com/security/cve/CVE-2020-15999 external
https://bugzilla.suse.com/1177914 external
https://bugzilla.suse.com/1177936 external
https://bugzilla.suse.com/1178824 external
https://bugzilla.suse.com/1178894 external
https://www.suse.com/security/cve/CVE-2020-16000 external
https://bugzilla.suse.com/1177936 external
https://www.suse.com/security/cve/CVE-2020-16001 external
https://bugzilla.suse.com/1177936 external
https://www.suse.com/security/cve/CVE-2020-16002 external
https://bugzilla.suse.com/1177936 external
https://www.suse.com/security/cve/CVE-2020-16003 external
https://bugzilla.suse.com/1177936 external
https://www.suse.com/security/cve/CVE-2020-16004 external
https://bugzilla.suse.com/1178375 external
https://www.suse.com/security/cve/CVE-2020-16005 external
https://bugzilla.suse.com/1178375 external
https://www.suse.com/security/cve/CVE-2020-16006 external
https://bugzilla.suse.com/1178375 external
https://www.suse.com/security/cve/CVE-2020-16007 external
https://bugzilla.suse.com/1178375 external
https://www.suse.com/security/cve/CVE-2020-16008 external
https://bugzilla.suse.com/1178375 external
https://www.suse.com/security/cve/CVE-2020-16009 external
https://bugzilla.suse.com/1178375 external
https://www.suse.com/security/cve/CVE-2020-16011 external
https://bugzilla.suse.com/1178375 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for opera",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for opera fixes the following issues:\n\nOpera was updated to version 72.0.3815.320\n\n  - CHR-8177 Update chromium on desktop-stable-86-3815 to\n    86.0.4240.183\n  - DNA-89748 \u2018Manage Extensions\u2019 dialog is displayed with\n    preloaded extensions\n  - DNA-89766 Address bar does not respond to actions\n\n- The update to chromium 86.0.4240.183 fixes following issues:\n  CVE-2020-16004, CVE-2020-16005, CVE-2020-16006, CVE-2020-16007,\n  CVE-2020-16008, CVE-2020-16009, CVE-2020-16011\n\n- Update to version 72.0.3815.200\n\n  - DNA-87150 Speed Dial tile can\u2019t be dragged to proper place\n  - DNA-89632 Improve hovering over icons\n  - DNA-89647 [Light mode] Wrong URL color in \u2018Add Site\u2019 section\n  - DNA-89791 Typo in Spanish\n\n- The update to chromium 86.0.4240.111 fixes following issues:\n  CVE-2020-16000, CVE-2020-16001, CVE-2020-16002, CVE-2020-15999,\n  CVE-2020-16003\n\n- Complete Opera 72.0 changelog at:\n  https://blogs.opera.com/desktop/changelog-for-72/\n\n- Update to version 71.0.3770.271\n\n  - DNA-88353 Crash at opera::TabCyclerView::HighlightContents\n    (content::WebContents*, bool)\n  - DNA-89177 Device update request should only be called when\n    FCM token has changed\n  - DNA-89186 Handle device expired case in all server calls\n  - DNA-89202 Pages are rendered in dark mode when force\n    dark mode prefs were synced from Opera GX\n  - DNA-89247 [Mac] Fullscreen video broken if sidebar is hidden\n  - DNA-89298 Some elements of VPN popup are misaligned to design\n  - DNA-89305 Crash after closing Downloads pop-up\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-1952",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1952-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:1952-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:1952-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZPDJYULXAMSZLQSDCDB6AOO535U72YK/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-15999 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-15999/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16000 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16000/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16001 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16001/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16002 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16002/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16003 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16003/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16004 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16004/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16005 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16005/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16006 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16006/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16007 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16007/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16008 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16008/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16009 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16009/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16011 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16011/"
      }
    ],
    "title": "Security update for opera",
    "tracking": {
      "current_release_date": "2026-09-20T19:16:36Z",
      "generator": {
        "date": "2020-11-17T11:28:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:1952-1",
      "initial_release_date": "2020-11-17T11:28:00Z",
      "revision_history": [
        {
          "date": "2020-11-17T11:28:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T19:16:36Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
                "product": {
                  "name": "opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
                  "product_id": "opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/opera@72.0.3815.320-lp152.2.21.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1 NonFree",
                "product": {
                  "name": "openSUSE Leap 15.1 NonFree",
                  "product_id": "openSUSE Leap 15.1 NonFree",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2 NonFree",
                "product": {
                  "name": "openSUSE Leap 15.2 NonFree",
                  "product_id": "openSUSE Leap 15.2 NonFree",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opera-0:72.0.3815.320-lp152.2.21.1.x86_64 as component of openSUSE Leap 15.1 NonFree",
          "product_id": "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        },
        "product_reference": "opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1 NonFree"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opera-0:72.0.3815.320-lp152.2.21.1.x86_64 as component of openSUSE Leap 15.2 NonFree",
          "product_id": "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        },
        "product_reference": "opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2 NonFree"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-15999",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-15999"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-15999",
          "url": "https://www.suse.com/security/cve/CVE-2020-15999"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177914 for CVE-2020-15999",
          "url": "https://bugzilla.suse.com/1177914"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177936 for CVE-2020-15999",
          "url": "https://bugzilla.suse.com/1177936"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178824 for CVE-2020-15999",
          "url": "https://bugzilla.suse.com/1178824"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178894 for CVE-2020-15999",
          "url": "https://bugzilla.suse.com/1178894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-15999"
    },
    {
      "cve": "CVE-2020-16000",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16000"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16000",
          "url": "https://www.suse.com/security/cve/CVE-2020-16000"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177936 for CVE-2020-16000",
          "url": "https://bugzilla.suse.com/1177936"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-16000"
    },
    {
      "cve": "CVE-2020-16001",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16001"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16001",
          "url": "https://www.suse.com/security/cve/CVE-2020-16001"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177936 for CVE-2020-16001",
          "url": "https://bugzilla.suse.com/1177936"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-16001"
    },
    {
      "cve": "CVE-2020-16002",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16002"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16002",
          "url": "https://www.suse.com/security/cve/CVE-2020-16002"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177936 for CVE-2020-16002",
          "url": "https://bugzilla.suse.com/1177936"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-16002"
    },
    {
      "cve": "CVE-2020-16003",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16003"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16003",
          "url": "https://www.suse.com/security/cve/CVE-2020-16003"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177936 for CVE-2020-16003",
          "url": "https://bugzilla.suse.com/1177936"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-16003"
    },
    {
      "cve": "CVE-2020-16004",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16004"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16004",
          "url": "https://www.suse.com/security/cve/CVE-2020-16004"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178375 for CVE-2020-16004",
          "url": "https://bugzilla.suse.com/1178375"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2020-16004"
    },
    {
      "cve": "CVE-2020-16005",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16005"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16005",
          "url": "https://www.suse.com/security/cve/CVE-2020-16005"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178375 for CVE-2020-16005",
          "url": "https://bugzilla.suse.com/1178375"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2020-16005"
    },
    {
      "cve": "CVE-2020-16006",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16006"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16006",
          "url": "https://www.suse.com/security/cve/CVE-2020-16006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178375 for CVE-2020-16006",
          "url": "https://bugzilla.suse.com/1178375"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2020-16006"
    },
    {
      "cve": "CVE-2020-16007",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16007"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16007",
          "url": "https://www.suse.com/security/cve/CVE-2020-16007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178375 for CVE-2020-16007",
          "url": "https://bugzilla.suse.com/1178375"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2020-16007"
    },
    {
      "cve": "CVE-2020-16008",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16008"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16008",
          "url": "https://www.suse.com/security/cve/CVE-2020-16008"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178375 for CVE-2020-16008",
          "url": "https://bugzilla.suse.com/1178375"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2020-16008"
    },
    {
      "cve": "CVE-2020-16009",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16009"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16009",
          "url": "https://www.suse.com/security/cve/CVE-2020-16009"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178375 for CVE-2020-16009",
          "url": "https://bugzilla.suse.com/1178375"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2020-16009"
    },
    {
      "cve": "CVE-2020-16011",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16011"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
          "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16011",
          "url": "https://www.suse.com/security/cve/CVE-2020-16011"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178375 for CVE-2020-16011",
          "url": "https://bugzilla.suse.com/1178375"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64",
            "openSUSE Leap 15.2 NonFree:opera-0:72.0.3815.320-lp152.2.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-17T11:28:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2020-16011"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.