CVE-2008-4197: Opera Browser

High severity, CVSS 8.8. EPSS: 6.3% chance of exploitation in the next 30 days.

Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.

Affected products

• Opera Opera Browser: before 9.52 (fixed in 9.52)

Published 2008-09-27. Last modified 2026-06-16.