OPENSUSE-SU-2021:1488-1

Vulnerability from csaf_opensuse - Published: 2021-11-19 11:06 - Updated: 2026-09-20 19:30
Summary
Security update for opera
Severity
Important
Notes
Title of the patch: Security update for opera
Description of the patch: This update for opera fixes the following issues: Opera was updated to version 81.0.4196.31 - DNA-95733 Implement the “Manage” menu in card details view - DNA-95736 Update UI for paused card - DNA-95791 Crash at base::operator< - DNA-95794 Sometimes the sidebar UI fails to load - DNA-95812 Retrieve cards info when showing autofill - DNA-96035 Cannot create virtual card on Sandbox environment - DNA-96147 “Buy” button does not work - DNA-96168 Update contributors list - DNA-96211 Enable #fast-tab-tooltip on all streams - DNA-96231 Promote O81 to stable - Complete Opera 80.1 changelog at: https://blogs.opera.com/desktop/changelog-for-81/ Update to version 81.0.4196.27 - CHR-8623 Update chromium on desktop-stable-95-4196 to 95.0.4638.54 - DNA-92384 Better segmenting of hint users - DNA-95523 Allow sorting in multi-card view - DNA-95659 Flow of Lastcard on first login - DNA-95735 Implement the button that reveals full card details - DNA-95747 Better way to handle expired funding card - DNA-95949 [Mac Retina] Clicking active tab should scroll to the top - DNA-95993 Update icon used for Yat in address bar dropdown - DNA-96021 Cleared download item view is never deleted - DNA-96036 Occupation field in 'Account – Edit' is shown twice - DNA-96127 Upgrade plan button does nothing - DNA-96138 'Add Card' button does not change to 'Upgrade Plan' after adding card - The update to chromium 95.0.4638.54 fixes following issues: CVE-2021-37981, CVE-2021-37982, CVE-2021-37983, CVE-2021-37984, CVE-2021-37985, CVE-2021-37986, CVE-2021-37987, CVE-2021-37988, CVE-2021-37989, CVE-2021-37990, CVE-2021-37991, CVE-2021-37992, CVE-2021-37993, CVE-2021-37994, CVE-2021-37995, CVE-2021-37996 Update to version 80.0.4170.72 - DNA-95522 Change card view to show all types of cards - DNA-95523 Allow sorting in multi-card view - DNA-95524 Allow searching for cards by name - DNA-95658 Allow user to add a card - DNA-95659 Flow of Lastcard on first login - DNA-95660 Implement editing card details - DNA-95699 Add card details view - DNA-95733 Implement the “Manage” menu in card details view - DNA-95735 Implement the button that reveals full card details - DNA-95736 Update UI for paused card - DNA-95747 Better way to handle expired funding card - DNA-95794 Sometimes the sidebar UI fails to load - DNA-95812 Retrieve cards info when showing autofill - DNA-96036 Occupation field in ‘Account – Edit’ is shown twice - DNA-96127 Upgrade plan button does nothing - DNA-96138 “Add Card” button does not change to “Upgrade Plan” after adding card
Patchnames: openSUSE-2021-1488
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2021-37981
9.6 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2021-37982
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37983
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37984
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37985
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37986
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37987
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37988
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37989
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37990
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37991
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37992
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37993
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37994
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37995
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
CVE-2021-37996
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
Recommended 1 product, the same list as for CVE-2021-37981
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://lists.opensuse.org/archives/list/security… self
https://lists.opensuse.org/archives/list/security… self
https://www.suse.com/security/cve/CVE-2021-37981/ self
https://www.suse.com/security/cve/CVE-2021-37982/ self
https://www.suse.com/security/cve/CVE-2021-37983/ self
https://www.suse.com/security/cve/CVE-2021-37984/ self
https://www.suse.com/security/cve/CVE-2021-37985/ self
https://www.suse.com/security/cve/CVE-2021-37986/ self
https://www.suse.com/security/cve/CVE-2021-37987/ self
https://www.suse.com/security/cve/CVE-2021-37988/ self
https://www.suse.com/security/cve/CVE-2021-37989/ self
https://www.suse.com/security/cve/CVE-2021-37990/ self
https://www.suse.com/security/cve/CVE-2021-37991/ self
https://www.suse.com/security/cve/CVE-2021-37992/ self
https://www.suse.com/security/cve/CVE-2021-37993/ self
https://www.suse.com/security/cve/CVE-2021-37994/ self
https://www.suse.com/security/cve/CVE-2021-37995/ self
https://www.suse.com/security/cve/CVE-2021-37996/ self
https://www.suse.com/security/cve/CVE-2021-37981 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37982 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37983 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37984 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37985 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37986 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37987 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37988 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37989 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37990 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37991 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37992 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37993 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37994 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37995 external
https://bugzilla.suse.com/1191844 external
https://www.suse.com/security/cve/CVE-2021-37996 external
https://bugzilla.suse.com/1191844 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for opera",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for opera fixes the following issues:\n\nOpera was updated to version 81.0.4196.31\n- DNA-95733 Implement the \u201cManage\u201d menu in card details view\n- DNA-95736 Update UI for paused card\n- DNA-95791 Crash at base::operator\u003c\n- DNA-95794 Sometimes the sidebar UI fails to load\n- DNA-95812 Retrieve cards info when showing autofill\n- DNA-96035 Cannot create virtual card on Sandbox environment\n- DNA-96147 \u201cBuy\u201d button does not work\n- DNA-96168 Update contributors list\n- DNA-96211 Enable #fast-tab-tooltip on all streams\n- DNA-96231 Promote O81 to stable\n- Complete Opera 80.1 changelog at:\n\n  https://blogs.opera.com/desktop/changelog-for-81/\n\nUpdate to version 81.0.4196.27\n\n- CHR-8623 Update chromium on desktop-stable-95-4196 to\n  95.0.4638.54\n- DNA-92384 Better segmenting of hint users\n- DNA-95523 Allow sorting in multi-card view\n- DNA-95659 Flow of Lastcard on first login\n- DNA-95735 Implement the button that reveals full card\n  details\n- DNA-95747 Better way to handle expired funding card\n- DNA-95949 [Mac Retina] Clicking active tab should scroll\n  to the top\n- DNA-95993 Update icon used for Yat in address bar dropdown\n- DNA-96021 Cleared download item view is never deleted\n- DNA-96036 Occupation field in \u0027Account \u2013 Edit\u0027 is shown\n  twice\n- DNA-96127 Upgrade plan button does nothing\n- DNA-96138 \u0027Add Card\u0027 button does not change to\n  \u0027Upgrade Plan\u0027 after adding card\n- The update to chromium 95.0.4638.54 fixes following issues:\n  CVE-2021-37981, CVE-2021-37982, CVE-2021-37983, CVE-2021-37984,\n  CVE-2021-37985, CVE-2021-37986, CVE-2021-37987, CVE-2021-37988,\n  CVE-2021-37989, CVE-2021-37990, CVE-2021-37991, CVE-2021-37992,\n  CVE-2021-37993, CVE-2021-37994, CVE-2021-37995, CVE-2021-37996\n\nUpdate to version 80.0.4170.72\n\n- DNA-95522 Change card view to show all types of cards\n- DNA-95523 Allow sorting in multi-card view\n- DNA-95524 Allow searching for cards by name\n- DNA-95658 Allow user to add a card\n- DNA-95659 Flow of Lastcard on first login\n- DNA-95660 Implement editing card details\n- DNA-95699 Add card details view\n- DNA-95733 Implement the \u201cManage\u201d menu in card details view\n- DNA-95735 Implement the button that reveals full card details\n- DNA-95736 Update UI for paused card\n- DNA-95747 Better way to handle expired funding card\n- DNA-95794 Sometimes the sidebar UI fails to load\n- DNA-95812 Retrieve cards info when showing autofill\n- DNA-96036 Occupation field in \u2018Account \u2013 Edit\u2019 is shown twice\n- DNA-96127 Upgrade plan button does nothing\n- DNA-96138 \u201cAdd Card\u201d button does not change to \u201cUpgrade Plan\u201d\n  after adding card\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2021-1488",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1488-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:1488-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2KPG5DWW4SNUCP3CCQ2LC7L3RKCFTIAA/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:1488-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2KPG5DWW4SNUCP3CCQ2LC7L3RKCFTIAA/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37981 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37981/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37982 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37982/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37983 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37983/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37984 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37984/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37985 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37985/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37986 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37986/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37987 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37987/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37988 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37988/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37989 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37989/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37990 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37990/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37991 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37991/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37992 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37992/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37993 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37993/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37994 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37994/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37995 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37995/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37996 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37996/"
      }
    ],
    "title": "Security update for opera",
    "tracking": {
      "current_release_date": "2026-09-20T19:30:38Z",
      "generator": {
        "date": "2021-11-19T11:06:35Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:1488-1",
      "initial_release_date": "2021-11-19T11:06:35Z",
      "revision_history": [
        {
          "date": "2021-11-19T11:06:35Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T19:30:38Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opera-0:81.0.4196.31-lp152.2.76.1.x86_64",
                "product": {
                  "name": "opera-0:81.0.4196.31-lp152.2.76.1.x86_64",
                  "product_id": "opera-0:81.0.4196.31-lp152.2.76.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/opera@81.0.4196.31-lp152.2.76.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2 NonFree",
                "product": {
                  "name": "openSUSE Leap 15.2 NonFree",
                  "product_id": "openSUSE Leap 15.2 NonFree",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opera-0:81.0.4196.31-lp152.2.76.1.x86_64 as component of openSUSE Leap 15.2 NonFree",
          "product_id": "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        },
        "product_reference": "opera-0:81.0.4196.31-lp152.2.76.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2 NonFree"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-37981",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37981"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37981",
          "url": "https://www.suse.com/security/cve/CVE-2021-37981"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37981",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37981"
    },
    {
      "cve": "CVE-2021-37982",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37982"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37982",
          "url": "https://www.suse.com/security/cve/CVE-2021-37982"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37982",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37982"
    },
    {
      "cve": "CVE-2021-37983",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37983"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37983",
          "url": "https://www.suse.com/security/cve/CVE-2021-37983"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37983",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37983"
    },
    {
      "cve": "CVE-2021-37984",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37984"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37984",
          "url": "https://www.suse.com/security/cve/CVE-2021-37984"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37984",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37984"
    },
    {
      "cve": "CVE-2021-37985",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37985"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow for connection to debugger to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37985",
          "url": "https://www.suse.com/security/cve/CVE-2021-37985"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37985",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37985"
    },
    {
      "cve": "CVE-2021-37986",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37986"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Tools to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37986",
          "url": "https://www.suse.com/security/cve/CVE-2021-37986"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37986",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37986"
    },
    {
      "cve": "CVE-2021-37987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37987",
          "url": "https://www.suse.com/security/cve/CVE-2021-37987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37987",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37987"
    },
    {
      "cve": "CVE-2021-37988",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37988"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who convinced a user to engage in specific gestures to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37988",
          "url": "https://www.suse.com/security/cve/CVE-2021-37988"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37988",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37988"
    },
    {
      "cve": "CVE-2021-37989",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37989"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Blink in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to abuse content security policy via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37989",
          "url": "https://www.suse.com/security/cve/CVE-2021-37989"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37989",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37989"
    },
    {
      "cve": "CVE-2021-37990",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37990"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed a remote attacker to leak cross-origin data via a crafted app.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37990",
          "url": "https://www.suse.com/security/cve/CVE-2021-37990"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37990",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37990"
    },
    {
      "cve": "CVE-2021-37991",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37991"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37991",
          "url": "https://www.suse.com/security/cve/CVE-2021-37991"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37991",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37991"
    },
    {
      "cve": "CVE-2021-37992",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37992"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37992",
          "url": "https://www.suse.com/security/cve/CVE-2021-37992"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37992",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37992"
    },
    {
      "cve": "CVE-2021-37993",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37993"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37993",
          "url": "https://www.suse.com/security/cve/CVE-2021-37993"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37993",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37993"
    },
    {
      "cve": "CVE-2021-37994",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37994"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37994",
          "url": "https://www.suse.com/security/cve/CVE-2021-37994"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37994",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37994"
    },
    {
      "cve": "CVE-2021-37995",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37995"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37995",
          "url": "https://www.suse.com/security/cve/CVE-2021-37995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37995",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37995"
    },
    {
      "cve": "CVE-2021-37996",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37996"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient validation of untrusted input Downloads in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to bypass navigation restrictions via a malicious file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37996",
          "url": "https://www.suse.com/security/cve/CVE-2021-37996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191844 for CVE-2021-37996",
          "url": "https://bugzilla.suse.com/1191844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2 NonFree:opera-0:81.0.4196.31-lp152.2.76.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-11-19T11:06:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37996"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.