VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 8, 2010· Updated Apr 29, 2026

CVE-2010-2665

CVE-2010-2665

Description

Cross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platforms, allows remote attackers to inject arbitrary web script or HTML via a data: URI, related to incorrect detection of the "opening site."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Opera before 10.54 (Windows/Mac) and 10.11 (UNIX) allows XSS via data: URIs due to incorrect detection of the opening site.

Vulnerability

A cross-site scripting (XSS) vulnerability exists in Opera versions prior to 10.54 on Windows and Mac OS X, and prior to 10.11 on UNIX platforms [1]. The flaw resides in the handling of data: URIs; the browser incorrectly detects the "opening site" when a data: URI is used, allowing an attacker to inject arbitrary web script or HTML [1]. This affects all Opera builds before the fixed versions.

Exploitation

An attacker can exploit this by crafting a malicious data: URI that, when visited by a victim, executes arbitrary script in the context of the site that opened the URI. The attacker does not require any special network position beyond being able to deliver the URI (e.g., via a link or redirect). No authentication is needed; the user simply needs to follow the crafted link.

Impact

Successful exploitation allows the attacker to inject arbitrary web script or HTML, leading to potential information disclosure, session hijacking, or other client-side attacks. The script runs in the context of the site that opened the data: URI, which could be any site the victim visits.

Mitigation

Opera addressed this issue in version 10.54 for Windows and Mac OS X, and version 10.11 for UNIX [2][3][4]. Users should update to these or later versions. No workarounds are documented. The vulnerability is not listed on the CISA KEV.

References
  1. Browser Problems? We can help you! | Help & FAQ | Opera
  2. Get to know Opera
  3. Get to know Opera
  4. Get to know Opera

AI Insight generated on May 23, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

107
  • Opera/Opera Browser106 versions
    cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*+ 105 more
    • cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*range: <=10.53
    • cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.00:beta3:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.01:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.10:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.10:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.50:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.50:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.51:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.52:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.52:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:10.52:beta2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.62:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.63:*:*:*:*:*:*:*
    • cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*
  • Opera/Operallm-fuzzy
    Range: <10.54 on Windows/Mac, <10.11 on UNIX

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

9

News mentions

0

No linked articles in our index yet.