CVE-2010-0653: Opera Browser

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.

Affected products

• Opera Opera Browser: any version

Published 2010-02-18. Last modified 2026-06-16.