CVE-2010-2666: Opera Browser

High severity, CVSS 9.3. EPSS: 5% chance of exploitation in the next 30 days.

Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operations.

Affected products

• Opera Opera Browser: up to and including 10.53; version 5.0 only; version 5.02 only; version 5.10 only; version 5.11 only; version 5.12 only; …

Published 2010-07-08. Last modified 2026-06-16.