GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OPENSUSE-SU-2022:0103-1

Vulnerability from csaf_opensuse - Published: 2022-04-04 16:01 - Updated: 2022-04-04 16:01
Summary
Security update for opera
Severity
Important
Notes
Title of the patch: Security update for opera
Description of the patch: This update for opera fixes the following issues: Opera was updated to 85.0.4341.28 - CHR-8816 Update chromium on desktop-stable-99-4341 to 99.0.4844.84 - DNA-98092 Crash at views::MenuItemView::GetMenuController() - DNA-98278 Translations for O85 - DNA-98320 [Mac] Unable to delete recent search entries - DNA-98614 Show recent searches for non-BABE users - DNA-98615 Allow removal of recent searches - DNA-98616 Add recent searches to ‘old’ BABE - DNA-98617 Make it possible to disable ad-blocker per-country - DNA-98651 Remove Instagram and Facebook Messenger in Russia - DNA-98653 Add flag #recent-searches - DNA-98696 smoketest PageInfoHistoryDataSourceTest.FormatTimestampString failing - DNA-98703 Port Chromium issue 1309225 to Opera Stable - The update to chromium 99.0.4844.84 fixes following issues: CVE-2022-1096 - Changes in 85.0.4341.18 - CHR-8789 Update chromium on desktop-stable-99-4341 to 99.0.4844.51 - DNA-98059 [Linux] Crash at opera::FreedomSettingsImpl::IsBypassForDotlessDomainsEnabled - DNA-98349 [Linux] Crash at bluez::BluezDBusManager::Get() - DNA-98126 System crash dialog shown on macOS <= 10.15 - DNA-98331 [Snap] Meme generator cropping / resizing broken - DNA-98394 Audio tab indicator set to 'muted' on videoconferencing sites - DNA-98481 Report errors in opauto_collector - The update to chromium 99.0.4844.51 fixes following issues: CVE-2022-0789, CVE-2022-0790, CVE-2022-0791, CVE-2022-0792, CVE-2022-0793, CVE-2022-0794, CVE-2022-0795, CVE-2022-0796, CVE-2022-0797, CVE-2022-0798, CVE-2022-0799, CVE-2022-0800, CVE-2022-0801, CVE-2022-0802, CVE-2022-0803, CVE-2022-0804, CVE-2022-0805, CVE-2022-0806, CVE-2022-0807, CVE-2022-0808, CVE-2022-0809 - Changes in 85.0.4341.13 - DNA-94119 Upgrade curl to 7.81.0 - DNA-97849 [Mac monterey] System shortcut interfere with Opera’s `ToggleSearchInOpenTabs` shortcut - DNA-98204 Automatic popout happens when video is paused - DNA-98231 Shortcuts are blocked by displayed tab tooltip when triggered quickly after tooltip appears - DNA-98321 Add thinlto-cache warnings to suppression list - DNA-98395 Promote O85 to stable - Complete Opera 85.0 changelog at: https://blogs.opera.com/desktop/changelog-for-85/ - Update to 84.0.4316.42 - DNA-94119 Upgrade curl to 7.81.0 - DNA-98092 Crash at views::MenuItemView::GetMenuController() - DNA-98204 Automatic popout happens when video is paused - DNA-98231 Shortcuts are blocked by displayed tab tooltip when triggered quickly after tooltip appears - Update to 84.0.4316.31 - CHR-8772 Update chromium on desktop-stable-98-4316 to 98.0.4758.109 - DNA-97573 [Win][Lin]”Close tab” button is not displayed on tabs playing media when many tabs are open - DNA-97729 cancelling the process uploading custom Wallpaper crashes the browser - DNA-97871 Google meet tab’s icons don’t fit on pinned tab - DNA-97872 Tab is being unpinned when video conferencing button is clicked - DNA-98039 Dark theme top sites have black background - DNA-98117 Clicking current tab information should hide tooltip
Patchnames: openSUSE-2022-103
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64
Vendor Fix
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact critical
Affected products
Recommended 1 product, the same list as for CVE-2022-0789
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://lists.opensuse.org/archives/list/security… self
https://lists.opensuse.org/archives/list/security… self
https://www.suse.com/security/cve/CVE-2022-0789/ self
https://www.suse.com/security/cve/CVE-2022-0790/ self
https://www.suse.com/security/cve/CVE-2022-0791/ self
https://www.suse.com/security/cve/CVE-2022-0792/ self
https://www.suse.com/security/cve/CVE-2022-0793/ self
https://www.suse.com/security/cve/CVE-2022-0794/ self
https://www.suse.com/security/cve/CVE-2022-0795/ self
https://www.suse.com/security/cve/CVE-2022-0796/ self
https://www.suse.com/security/cve/CVE-2022-0797/ self
https://www.suse.com/security/cve/CVE-2022-0798/ self
https://www.suse.com/security/cve/CVE-2022-0799/ self
https://www.suse.com/security/cve/CVE-2022-0800/ self
https://www.suse.com/security/cve/CVE-2022-0801/ self
https://www.suse.com/security/cve/CVE-2022-0802/ self
https://www.suse.com/security/cve/CVE-2022-0803/ self
https://www.suse.com/security/cve/CVE-2022-0804/ self
https://www.suse.com/security/cve/CVE-2022-0805/ self
https://www.suse.com/security/cve/CVE-2022-0806/ self
https://www.suse.com/security/cve/CVE-2022-0807/ self
https://www.suse.com/security/cve/CVE-2022-0808/ self
https://www.suse.com/security/cve/CVE-2022-0809/ self
https://www.suse.com/security/cve/CVE-2022-1096/ self
https://www.suse.com/security/cve/CVE-2022-0789 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0790 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0791 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0792 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0793 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0794 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0795 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0796 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0797 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0798 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0799 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0800 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0801 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0802 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0803 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0804 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0805 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0806 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0807 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0808 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-0809 external
https://bugzilla.suse.com/1196641 external
https://www.suse.com/security/cve/CVE-2022-1096 external
https://bugzilla.suse.com/1197552 external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for opera",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for opera fixes the following issues:\n\nOpera was updated to 85.0.4341.28\n\n  - CHR-8816 Update chromium on desktop-stable-99-4341\n    to 99.0.4844.84\n  - DNA-98092 Crash at views::MenuItemView::GetMenuController()\n  - DNA-98278 Translations for O85\n  - DNA-98320 [Mac] Unable to delete recent search entries\n  - DNA-98614 Show recent searches for non-BABE users\n  - DNA-98615 Allow removal of recent searches\n  - DNA-98616 Add recent searches to \u2018old\u2019 BABE\n  - DNA-98617 Make it possible to disable ad-blocker per-country\n  - DNA-98651 Remove Instagram and Facebook Messenger in Russia\n  - DNA-98653 Add flag #recent-searches\n  - DNA-98696 smoketest \n    PageInfoHistoryDataSourceTest.FormatTimestampString failing\n  - DNA-98703 Port Chromium issue 1309225 to Opera Stable\n\n- The update to chromium 99.0.4844.84 fixes following issues:  \n  CVE-2022-1096\n\n- Changes in 85.0.4341.18\n\n  - CHR-8789 Update chromium on desktop-stable-99-4341 to\n    99.0.4844.51\n  - DNA-98059 [Linux] Crash at\n    opera::FreedomSettingsImpl::IsBypassForDotlessDomainsEnabled\n  - DNA-98349 [Linux] Crash at bluez::BluezDBusManager::Get()\n  - DNA-98126 System crash dialog shown on macOS \u003c= 10.15\n  - DNA-98331 [Snap] Meme generator cropping / resizing broken\n  - DNA-98394 Audio tab indicator set to \u0027muted\u0027 on\n    videoconferencing sites\n  - DNA-98481 Report errors in opauto_collector\n\n- The update to chromium 99.0.4844.51 fixes following issues:\n  CVE-2022-0789, CVE-2022-0790, CVE-2022-0791, CVE-2022-0792,\n  CVE-2022-0793, CVE-2022-0794, CVE-2022-0795, CVE-2022-0796,\n  CVE-2022-0797, CVE-2022-0798, CVE-2022-0799, CVE-2022-0800,\n  CVE-2022-0801, CVE-2022-0802, CVE-2022-0803, CVE-2022-0804,\n  CVE-2022-0805, CVE-2022-0806, CVE-2022-0807, CVE-2022-0808,\n  CVE-2022-0809\n\n- Changes in 85.0.4341.13\n\n  - DNA-94119 Upgrade curl to 7.81.0\n  - DNA-97849 [Mac monterey] System shortcut interfere with\n    Opera\u2019s `ToggleSearchInOpenTabs` shortcut\n  - DNA-98204 Automatic popout happens when video is paused\n  - DNA-98231 Shortcuts are blocked by displayed tab tooltip\n    when triggered quickly after tooltip appears\n  - DNA-98321 Add thinlto-cache warnings to suppression list\n  - DNA-98395 Promote O85 to stable\n\n- Complete Opera 85.0 changelog at:\n  https://blogs.opera.com/desktop/changelog-for-85/\n\n- Update to 84.0.4316.42\n\n  - DNA-94119 Upgrade curl to 7.81.0\n  - DNA-98092 Crash at views::MenuItemView::GetMenuController()\n  - DNA-98204 Automatic popout happens when video is paused\n  - DNA-98231 Shortcuts are blocked by displayed tab tooltip when\n    triggered quickly after tooltip appears\n\n- Update to 84.0.4316.31\n\n  - CHR-8772 Update chromium on desktop-stable-98-4316 to\n    98.0.4758.109\n  - DNA-97573 [Win][Lin]\u201dClose tab\u201d button is not displayed on tabs\n    playing media when many tabs are open\n  - DNA-97729 cancelling the process uploading custom Wallpaper\n    crashes the browser\n  - DNA-97871 Google meet tab\u2019s icons don\u2019t fit on pinned tab\n  - DNA-97872 Tab is being unpinned when video conferencing\n    button is clicked\n  - DNA-98039 Dark theme top sites have black background\n  - DNA-98117 Clicking current tab information should hide tooltip\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2022-103",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_0103-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2022:0103-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ITLKQDHCBVY73BXRDDHU7JJZJG7TVNG/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2022:0103-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ITLKQDHCBVY73BXRDDHU7JJZJG7TVNG/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0789 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0789/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0790 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0790/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0791 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0791/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0792 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0792/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0793 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0793/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0794 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0794/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0795 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0795/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0796 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0796/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0797 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0797/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0798 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0798/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0799 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0799/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0800 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0800/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0801 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0801/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0802 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0802/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0803 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0803/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0804 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0804/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0805 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0805/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0806 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0806/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0807 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0807/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0808 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0808/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0809 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0809/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1096 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1096/"
      }
    ],
    "title": "Security update for opera",
    "tracking": {
      "current_release_date": "2022-04-04T16:01:30Z",
      "generator": {
        "date": "2022-04-04T16:01:30Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2022:0103-1",
      "initial_release_date": "2022-04-04T16:01:30Z",
      "revision_history": [
        {
          "date": "2022-04-04T16:01:30Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opera-85.0.4341.28-lp153.2.42.1.x86_64",
                "product": {
                  "name": "opera-85.0.4341.28-lp153.2.42.1.x86_64",
                  "product_id": "opera-85.0.4341.28-lp153.2.42.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3 NonFree",
                "product": {
                  "name": "openSUSE Leap 15.3 NonFree",
                  "product_id": "openSUSE Leap 15.3 NonFree",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opera-85.0.4341.28-lp153.2.42.1.x86_64 as component of openSUSE Leap 15.3 NonFree",
          "product_id": "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        },
        "product_reference": "opera-85.0.4341.28-lp153.2.42.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3 NonFree"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-0789",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0789"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0789",
          "url": "https://www.suse.com/security/cve/CVE-2022-0789"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0789",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0789"
    },
    {
      "cve": "CVE-2022-0790",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0790"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0790",
          "url": "https://www.suse.com/security/cve/CVE-2022-0790"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0790",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0790"
    },
    {
      "cve": "CVE-2022-0791",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0791"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via user interactions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0791",
          "url": "https://www.suse.com/security/cve/CVE-2022-0791"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0791",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0791"
    },
    {
      "cve": "CVE-2022-0792",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0792"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0792",
          "url": "https://www.suse.com/security/cve/CVE-2022-0792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0792",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0792"
    },
    {
      "cve": "CVE-2022-0793",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0793"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0793",
          "url": "https://www.suse.com/security/cve/CVE-2022-0793"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0793",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0793"
    },
    {
      "cve": "CVE-2022-0794",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0794"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0794",
          "url": "https://www.suse.com/security/cve/CVE-2022-0794"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0794",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0794"
    },
    {
      "cve": "CVE-2022-0795",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0795"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Type confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0795",
          "url": "https://www.suse.com/security/cve/CVE-2022-0795"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0795",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0795"
    },
    {
      "cve": "CVE-2022-0796",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0796"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0796",
          "url": "https://www.suse.com/security/cve/CVE-2022-0796"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0796",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0796"
    },
    {
      "cve": "CVE-2022-0797",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0797"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0797",
          "url": "https://www.suse.com/security/cve/CVE-2022-0797"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0797",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0797"
    },
    {
      "cve": "CVE-2022-0798",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0798"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0798",
          "url": "https://www.suse.com/security/cve/CVE-2022-0798"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0798",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0798"
    },
    {
      "cve": "CVE-2022-0799",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0799"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0799",
          "url": "https://www.suse.com/security/cve/CVE-2022-0799"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0799",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0799"
    },
    {
      "cve": "CVE-2022-0800",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0800"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0800",
          "url": "https://www.suse.com/security/cve/CVE-2022-0800"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0800",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0800"
    },
    {
      "cve": "CVE-2022-0801",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0801"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page. (Chrome security severity: Medium)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0801",
          "url": "https://www.suse.com/security/cve/CVE-2022-0801"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0801",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0801"
    },
    {
      "cve": "CVE-2022-0802",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0802"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0802",
          "url": "https://www.suse.com/security/cve/CVE-2022-0802"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0802",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0802"
    },
    {
      "cve": "CVE-2022-0803",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0803"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0803",
          "url": "https://www.suse.com/security/cve/CVE-2022-0803"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0803",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0803"
    },
    {
      "cve": "CVE-2022-0804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0804",
          "url": "https://www.suse.com/security/cve/CVE-2022-0804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0804",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0804"
    },
    {
      "cve": "CVE-2022-0805",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0805"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0805",
          "url": "https://www.suse.com/security/cve/CVE-2022-0805"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0805",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0805"
    },
    {
      "cve": "CVE-2022-0806",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0806"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross-origin data via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0806",
          "url": "https://www.suse.com/security/cve/CVE-2022-0806"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0806",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0806"
    },
    {
      "cve": "CVE-2022-0807",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0807"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0807",
          "url": "https://www.suse.com/security/cve/CVE-2022-0807"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0807",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0807"
    },
    {
      "cve": "CVE-2022-0808",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0808"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in a series of user interaction to potentially exploit heap corruption via user interactions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0808",
          "url": "https://www.suse.com/security/cve/CVE-2022-0808"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0808",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0808"
    },
    {
      "cve": "CVE-2022-0809",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0809"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0809",
          "url": "https://www.suse.com/security/cve/CVE-2022-0809"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196641 for CVE-2022-0809",
          "url": "https://bugzilla.suse.com/1196641"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-0809"
    },
    {
      "cve": "CVE-2022-1096",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1096"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1096",
          "url": "https://www.suse.com/security/cve/CVE-2022-1096"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1197552 for CVE-2022-1096",
          "url": "https://bugzilla.suse.com/1197552"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3 NonFree:opera-85.0.4341.28-lp153.2.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-04-04T16:01:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-1096"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…