CVE-2014-0815

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-06 · updated 2026-06-17
Weakness: CWE-200

Description

The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies.

Affected products

Opera Browser: through 17.00; 1.00, 10.00, 10.00-alpha, 10.00-beta1, 10.00-beta2, 10.00-beta3 (+55)

References

http://blogs.opera.com/security/2014/01/security-changes-features-opera-19/
http://jvn.jp/en/jp/JVN23256725/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000014
http://www.securityfocus.com/bid/65391
https://exchange.xforce.ibmcloud.com/vulnerabilities/91090
http://blogs.opera.com/security/2014/01/security-changes-features-opera-19/
http://jvn.jp/en/jp/JVN23256725/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000014
http://www.securityfocus.com/bid/65391
https://exchange.xforce.ibmcloud.com/vulnerabilities/91090

Get alerted when CVE-2014-0815 or the next vulnerability affects your stack