CVE-2007-4367: Opera Browser

High severity, CVSS 9.3. EPSS: 8.2% chance of exploitation in the next 30 days.

Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."

Affected products

• Opera Opera Browser: before 9.23 (fixed in 9.23)

Published 2007-08-15. Last modified 2026-06-16.