Addressing the "CrossBarking" vulnerability discovered in collaboration with Guardio

<!DOCTYPE html>     <html class="no-js">  <head> <meta charset="utf-8">  <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-N57PTZ9');</script>  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <link rel="icon" type="image/x-icon" href="https://blogs.opera.com/security/wp-content/themes/opera-2022/static/img/opera.ced696a02c2c07e24ea24dbbed94d229.ico"/> <meta name="description" content=""> <meta name="author" content=""> <meta name="viewport" content="width=device-width"> <link rel="stylesheet" type="text/css" media="all" href="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/css/main.266bb4a32b20e5f6d46d8aa9fdc1e1c6.css"/> <link rel="pingback" href="https://blogs.opera.com/security/xmlrpc.php"/> <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />  <title>Addressing the "CrossBarking" vulnerability discovered in collaboration with Guardio | Opera Security</title> <meta name="description" content="In an instance of responsible disclosure, Guardio discovered a now-fixed vulnerability called CrossBarking, that could affect add-on users." /> <link rel="canonical" href="https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/" /> <meta property="og:locale" content="en_US" /> <meta property="og:type" content="article" /> <meta property="og:title" content="Addressing the "CrossBarking" vulnerability discovered in collaboration with Guardio" /> <meta property="og:description" content="In an instance of responsible disclosure, Guardio discovered a now-fixed vulnerability called CrossBarking, that could affect add-on users." /> <meta property="og:url" content="https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/" /> <meta property="og:site_name" content="Opera Security" /> <meta property="article:published_time" content="2024-10-30T13:00:00+00:00" /> <meta property="article:modified_time" content="2024-11-01T21:13:07+00:00" /> <meta property="og:image" content="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Opera-Guardio-vulnerability.png" /> <meta property="og:image:width" content="1920" /> <meta property="og:image:height" content="1080" /> <meta property="og:image:type" content="image/png" /> <meta name="author" content="Michael Tegos" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:label1" content="Written by" /> <meta name="twitter:data1" content="Michael Tegos" /> <meta name="twitter:label2" content="Est. reading time" /> <meta name="twitter:data2" content="3 minutes" /> <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/","url":"https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/","name":"Addressing the \"CrossBarking\" vulnerability discovered in collaboration with Guardio | Opera Security","isPartOf":{"@id":"https://blogs.opera.com/security/#website"},"primaryImageOfPage":{"@id":"https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/#primaryimage"},"image":{"@id":"https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/#primaryimage"},"thumbnailUrl":"https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Opera-Guardio-vulnerability.png","datePublished":"2024-10-30T13:00:00+00:00","dateModified":"2024-11-01T21:13:07+00:00","author":{"@id":"https://blogs.opera.com/security/#/schema/person/e4d220f7da64931f0544285b001574e4"},"description":"In an instance of responsible disclosure, Guardio discovered a now-fixed vulnerability called CrossBarking, that could affect add-on users.","breadcrumb":{"@id":"https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/#primaryimage","url":"https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Opera-Guardio-vulnerability.png","contentUrl":"https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Opera-Guardio-vulnerability.png","width":1920,"height":1080,"caption":"Addressing the CrossBarking cross-browser attack vulnerability discovered in collaboration with Guardio"},{"@type":"BreadcrumbList","@id":"https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://blogs.opera.com/security/"},{"@type":"ListItem","position":2,"name":"Addressing the “CrossBarking” vulnerability discovered in collaboration with Guardio"}]},{"@type":"WebSite","@id":"https://blogs.opera.com/security/#website","url":"https://blogs.opera.com/security/","name":"Opera Security","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://blogs.opera.com/security/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https://blogs.opera.com/security/#/schema/person/e4d220f7da64931f0544285b001574e4","name":"Michael Tegos","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://blogs.opera.com/security/#/schema/person/image/","url":"https://secure.gravatar.com/avatar/5f3b4cec87460e75740fa96dfa943985?s=96&d=mm&r=g","contentUrl":"https://secure.gravatar.com/avatar/5f3b4cec87460e75740fa96dfa943985?s=96&d=mm&r=g","caption":"Michael Tegos"},"description":"Product Marketing Manager at Opera","url":"https://blogs.opera.com/security/author/mtegos/"}]}</script>  <link rel="alternate" type="application/rss+xml" title="Opera Security » Addressing the “CrossBarking” vulnerability discovered in collaboration with Guardio Comments Feed" href="https://blogs.opera.com/security/2024/10/vulnerability-opera-guardio/feed/" /> <link rel='stylesheet' id='wp-block-library-css' href='https://www-static-blogs.operacdn.com/security/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2' type='text/css' media='all' /> <style id='classic-theme-styles-inline-css' type='text/css'> /*! This file is auto-generated */ .wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none} </style> <style id='global-styles-inline-css' type='text/css'> :root{--wp--preset--aspect-ratio--square: 1;--wp--preset--aspect-ratio--4-3: 4/3;--wp--preset--aspect-ratio--3-4: 3/4;--wp--preset--aspect-ratio--3-2: 3/2;--wp--preset--aspect-ratio--2-3: 2/3;--wp--preset--aspect-ratio--16-9: 16/9;--wp--preset--aspect-ratio--9-16: 9/16;--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);}:where(.is-layout-flex){gap: 0.5em;}:where(.is-layout-grid){gap: 0.5em;}body .is-layout-flex{display: flex;}.is-layout-flex{flex-wrap: wrap;align-items: center;}.is-layout-flex > :is(*, div){margin: 0;}body .is-layout-grid{display: grid;}.is-layout-grid > :is(*, div){margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;} :where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;} :where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;} :root :where(.wp-block-pullquote){font-size: 1.5em;line-height: 1.6;} </style> <link rel='stylesheet' id='related-posts-by-taxonomy-css' href='https://www-static-blogs.operacdn.com/security/wp-content/plugins/related-posts-by-taxonomy/includes/assets/css/styles.css?ver=6.6.2' type='text/css' media='all' /> <link rel="https://api.w.org/" href="https://blogs.opera.com/security/wp-json/" /><link rel="alternate" title="JSON" type="application/json" href="https://blogs.opera.com/security/wp-json/wp/v2/posts/601" /><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://blogs.opera.com/security/xmlrpc.php?rsd" /> <meta name="generator" content="WordPress 6.6.2" /> <link rel='shortlink' href='https://blogs.opera.com/security/?p=601' /> <link rel="alternate" title="oEmbed (JSON)" type="application/json+oembed" href="https://blogs.opera.com/security/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fblogs.opera.com%2Fsecurity%2F2024%2F10%2Fvulnerability-opera-guardio%2F" /> <link rel="alternate" title="oEmbed (XML)" type="text/xml+oembed" href="https://blogs.opera.com/security/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fblogs.opera.com%2Fsecurity%2F2024%2F10%2Fvulnerability-opera-guardio%2F&format=xml" /> </head> <body class="post-template-default single single-post postid-601 single-format-standard">  <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-N57PTZ9" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>   <div class="header" role="navigation"> <div class="header__wrapper container-fluid wrapper"> <a class="header__brand" href="https://blogs.opera.com/security/"> <img src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/logo.64d9b43037de76c75fa0a1a04d91f14e.svg" alt="Opera"/> </a> <div class="search"> <div class="searchBar"> <form role="search" method="get" id="searchform" action="https://blogs.opera.com/security/" > <input id="searchQueryInput" class="search-form search-field" type="text" name="s" placeholder="Search Blogs" value=""/> <button id="searchsubmit" type="submit" id="searchsubmit" /> <svg width="12" height="12" viewBox="0 0 12 12" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M5.37909 0.666748L10.6667 6.00008M10.6667 6.00008L5.37909 11.3334M10.6667 6.00008L0 6.00008" stroke="#666666" stroke-width="1.46667"/> </svg> </button> <button id="searchQueryIcon" name="searchQueryIcon"> <svg width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg"> <path fill-rule="evenodd" clip-rule="evenodd" d="M11.3368 7.40174C11.3368 9.57502 9.57502 11.3368 7.40174 11.3368C5.22846 11.3368 3.46667 9.57502 3.46667 7.40174C3.46667 5.22846 5.22846 3.46667 7.40174 3.46667C9.57502 3.46667 11.3368 5.22846 11.3368 7.40174ZM10.6676 11.7047C9.76062 12.3942 8.62897 12.8035 7.40174 12.8035C4.41844 12.8035 2 10.385 2 7.40174C2 4.41844 4.41844 2 7.40174 2C10.385 2 12.8035 4.41844 12.8035 7.40174C12.8035 8.62897 12.3942 9.76062 11.7047 10.6676L13.9972 12.9601L12.9601 13.9972L10.6676 11.7047Z" fill="#999999"/> </svg> </button> </form> </div> </div> <div class="header__menu"> <ul id="menu-top-menu" class="menu"><li id="menu-item-466" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-466"><a href="https://blogs.opera.com/news/">News</a></li> <li id="menu-item-467" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-467"><a href="https://blogs.opera.com/desktop/">Desktop</a></li> <li id="menu-item-468" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-468"><a href="https://blogs.opera.com/mobile/">Mobile</a></li> <li id="menu-item-470" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-home menu-item-470"><a href="https://blogs.opera.com/security/">Security</a></li> <li id="menu-item-575" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-575"><a href="https://blogs.opera.com/news/category/gaming/">Gaming</a></li> <li id="menu-item-574" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-574"><a href="https://blogs.opera.com/news/category/ai/">AI</a></li> <li id="menu-item-471" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-471"><a href="#">Other</a> <ul class="sub-menu"> <li id="menu-item-472" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-472"><a href="https://blogs.opera.com/tips-and-tricks/">Tips & Tricks</a></li> <li id="menu-item-469" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-469"><a href="https://blogs.opera.com/crypto/">Crypto</a></li> <li id="menu-item-473" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-473"><a href="https://blogs.opera.com/russia/">Russia & CIS</a></li> <li id="menu-item-474" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-474"><a href="https://blogs.opera.com/africa/">Africa</a></li> <li id="menu-item-475" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-475"><a href="https://blogs.opera.com/india/">India</a></li> <li id="menu-item-476" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-476"><a href="https://blogs.opera.com/indonesia/">Indonesia</a></li> <li id="menu-item-477" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-477"><a href="https://blogs.opera.com/germany/">Germany</a></li> </ul> </li> <li id="menu-item-478" class="main-nav-separator menu-item menu-item-type-custom menu-item-object-custom menu-item-478"><a href="https://www.opera.com/download">Downloads</a></li> </ul> <div class="right"> <div class="dark-theme-switch @mobile-hidden"> </div> <div class="header__download"> <span class="download-button--wrapper download-button--desktop download-button--full "> <a href="https://www.opera.com/download" target="_blank" class="button" rel="nofollow noopener" data-alternative="None"> <span class="cta"><span class="platform-icon">Download now</span></span> </a> </span> </div> </div> </div> <input id="header__switcher" class="hidden--clip header__switcher" type="checkbox"> <label class="header__menu-switcher" for="header__switcher" style="background-image: url(https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/hamburger-icon.f6b521ba8d57ffa897052aa010122589.svg)"></label> <nav class="header__menu-nav container-fluid"><div class="menu-item menu-item-type-custom menu-item-object-custom menu-item-466"><input id="hf-browsers-switcher466" class="hf__dd-switcher hf-hide" type="checkbox"><h4 class="hf__heading"><label class="hf__label" for="hf-browsers-switcher466"><a class="hf__link hover-line" href=https://blogs.opera.com/news/">News</a></label></h4></div><div class="menu-item menu-item-type-custom menu-item-object-custom menu-item-467"><input id="hf-browsers-switcher467" class="hf__dd-switcher hf-hide" type="checkbox"><h4 class="hf__heading"><label class="hf__label" for="hf-browsers-switcher467"><a class="hf__link hover-line" href=https://blogs.opera.com/desktop/">Desktop</a></label></h4></div><div class="menu-item menu-item-type-custom menu-item-object-custom menu-item-468"><input id="hf-browsers-switcher468" class="hf__dd-switcher hf-hide" type="checkbox"><h4 class="hf__heading"><label class="hf__label" for="hf-browsers-switcher468"><a class="hf__link hover-line" href=https://blogs.opera.com/mobile/">Mobile</a></label></h4></div><div class="menu-item menu-item-type-custom menu-item-object-custom menu-item-home menu-item-470"><input id="hf-browsers-switcher470" class="hf__dd-switcher hf-hide" type="checkbox"><h4 class="hf__heading"><label class="hf__label" for="hf-browsers-switcher470"><a class="hf__link hover-line" href=https://blogs.opera.com/security/">Security</a></label></h4></div><div class="menu-item menu-item-type-custom menu-item-object-custom menu-item-575"><input id="hf-browsers-switcher575" class="hf__dd-switcher hf-hide" type="checkbox"><h4 class="hf__heading"><label class="hf__label" for="hf-browsers-switcher575"><a class="hf__link hover-line" href=https://blogs.opera.com/news/category/gaming/">Gaming</a></label></h4></div><div class="menu-item menu-item-type-custom menu-item-object-custom menu-item-574"><input id="hf-browsers-switcher574" class="hf__dd-switcher hf-hide" type="checkbox"><h4 class="hf__heading"><label class="hf__label" for="hf-browsers-switcher574"><a class="hf__link hover-line" href=https://blogs.opera.com/news/category/ai/">AI</a></label></h4></div><div class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children dropdown menu-item-471"><input id="hf-browsers-switcher471" class="hf__dd-switcher hf-hide" type="checkbox"><h4 class="hf__heading"><label class="hf__label" for="hf-browsers-switcher471"><a class="hf__link hover-line" href=#">Other</a></label></h4><div class="hf__dd-content header__dd-content"> <ul class="dropdown-menu depth_0"> <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-472"><a class="hf__link hover-line" href="https://blogs.opera.com/tips-and-tricks/"><span class="hover-line__element">Tips & Tricks</span></a></li> <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-469"><a class="hf__link hover-line" href="https://blogs.opera.com/crypto/"><span class="hover-line__element">Crypto</span></a></li> <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-473"><a class="hf__link hover-line" href="https://blogs.opera.com/russia/"><span class="hover-line__element">Russia & CIS</span></a></li> <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-474"><a class="hf__link hover-line" href="https://blogs.opera.com/africa/"><span class="hover-line__element">Africa</span></a></li> <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-475"><a class="hf__link hover-line" href="https://blogs.opera.com/india/"><span class="hover-line__element">India</span></a></li> <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-476"><a class="hf__link hover-line" href="https://blogs.opera.com/indonesia/"><span class="hover-line__element">Indonesia</span></a></li> <li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-477"><a class="hf__link hover-line" href="https://blogs.opera.com/germany/"><span class="hover-line__element">Germany</span></a></li></ul></div></div><div class="main-nav-separator menu-item menu-item-type-custom menu-item-object-custom menu-item-478"><input id="hf-browsers-switcher478" class="hf__dd-switcher hf-hide" type="checkbox"><h4 class="hf__heading"><label class="hf__label" for="hf-browsers-switcher478"><a class="hf__link hover-line" href=https://www.opera.com/download">Downloads</a></label></h4></div></nav> </div> </div> <div id="opera" class="container-fluid wrapper"> <article class="post post-601 type-post status-publish format-standard has-post-thumbnail hentry category-front-page category-news category-security" id="post-601"> <header> <p class="category"><a href="https://blogs.opera.com/security/category/news/">News, </a><a href="https://blogs.opera.com/security/category/security/">Security</a></p> <h1 class="title">Addressing the “CrossBarking” vulnerability discovered in collaboration with Guardio</a></h1> <span class="share-icons"> <p>Share</p> <ul><li><a class="col-1 sbtn s-facebook" href="https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fblogs.opera.com%2Fsecurity%2F2024%2F10%2Fvulnerability-opera-guardio%2F" target="_blank" rel="nofollow"><img src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/share-article_facebook.da73949178f1431aa6845a440149477e.svg"></a></li><li><a class="col-1 sbtn s-twitter" href="https://twitter.com/intent/tweet?text=Addressing%20the%20“CrossBarking”%20vulnerability%20discovered%20in%20collaboration%20with%20Guardio&url=https%3A%2F%2Fblogs.opera.com%2Fsecurity%2F2024%2F10%2Fvulnerability-opera-guardio%2F&via=wpvkp" target="_blank" rel="nofollow"><img src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/share-article_twitter.2d56c3ce28cf4b8b0c903daaa279cdec.svg"></a></li><li><a class="col-2 sbtn s-linkedin" href="https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblogs.opera.com%2Fsecurity%2F2024%2F10%2Fvulnerability-opera-guardio%2F&title=Addressing%20the%20“CrossBarking”%20vulnerability%20discovered%20in%20collaboration%20with%20Guardio" target="_blank" rel="nofollow"><img src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/share-article_linkedin.6432d0e754bc197e2aeb64c38fcf2e23.svg"></a></li><li class="to-clipboard"><img src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/share-article_copy-link.c83a9d420f922d3fde784398f6d5b79c.png"></li></ul> </span> <span class="header-image"> <img src="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Opera-Guardio-vulnerability.png" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="Addressing the CrossBarking cross-browser attack vulnerability discovered in collaboration with Guardio" decoding="async" fetchpriority="high" srcset="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Opera-Guardio-vulnerability.png 1920w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Opera-Guardio-vulnerability-300x169.png 300w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Opera-Guardio-vulnerability-700x394.png 700w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Opera-Guardio-vulnerability-768x432.png 768w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Opera-Guardio-vulnerability-1536x864.png 1536w" sizes="(max-width: 1920px) 100vw, 1920px" /> </span> <div class="time-wrapper"> <time datetime="2024-10-30">October 30th, 2024</time> </div> </header> <div class="content-wrapper"> <div class="content"> <p>Hi Opera users!</p> <p>Over time, we have shared details about <a href="https://security.opera.com/en/policy/" target="_blank" rel="noreferrer noopener">how we approach security vulnerabilities</a>, and especially how we work with external security researchers to identify and fix them before they have a chance to be exploited by bad actors. This is called responsible disclosure and it is a best practice in cybersecurity, helping software providers stay ahead of threats and allowing researchers to showcase their good work and raise awareness around cybersecurity challenges. </p> <p>Recently, we collaborated with cybersecurity researcher Guardio on a vulnerability they called “CrossBarking”, which depends on the user installing a malicious extension in the browser from outside Opera’s Add-ons Store. This is a very specific scenario that limits the number of users that could be affected because it relies on users being tricked into downloading a malicious extension from a third party store – where Opera cannot vouch for the integrity of extensions.</p> <p>Nevertheless, the attack exploited a weakness in our own add-on infrastructure, so it was imperative to fix the vulnerability promptly. Our team collaborated with Guardio to address this and the fix was deployed on September 24, 2024. To our knowledge, no Opera user had been affected by this vulnerability before it was patched.</p> <p><strong>How the vulnerability worked</strong></p> <p>The vulnerability took advantage of the way web apps access Private APIs within the browser to power special features. This is a standard process in browsers as they get more powerful and are able to provide more functionality to users.</p> <p>Guardio discovered that a malicious extension could potentially exploit this process. They successfully published such an extension on the Chrome Web Store, disguising it as a friendly-looking app. How friendly-looking? It promised to place a puppy on every web page the user visited – just to make it that much more irresistible! </p> <p>From there, a user would have to be tricked into opening themselves up to attack by:</p> <ul class="wp-block-list"> <li>Downloading and installing the extension in Opera from the Chrome Web Store</li> <li>Confirming they were OK with Opera’s warning that the extension comes from outside Opera’s Add-ons Store and as such has not been reviewed by Opera</li> </ul> <div class="wp-block-image"> <figure class="aligncenter size-full"><img decoding="async" width="437" height="269" src="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Screenshot-2024-10-18-at-12.42.07.png" alt="" class="wp-image-603" srcset="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Screenshot-2024-10-18-at-12.42.07.png 437w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/10/Screenshot-2024-10-18-at-12.42.07-300x185.png 300w" sizes="(max-width: 437px) 100vw, 437px" /></figure></div> <p><strong>Why manual review of extensions matters</strong></p> <p>Why did Guardio’s attack method require publishing an extension on the Chrome Web Store instead of Opera’s own Add-ons Store? That’s because Opera’s Add-ons Store is unique in applying exclusively manual review of all extensions hosted in it – specifically to stop such malicious extensions from ever reaching users. </p> <p>Although Opera users can install extensions from third-party extension stores, it’s not possible for us to control the security of extensions published in such stores. We typically recommend using our own Add-ons Store, where each extension has been thoroughly checked by humans before being allowed in.</p> <p>Following Guardio’s findings, our team collaborated with them to fix the “CrossBarking” vulnerability. As a next step, we will also be reviewing the way that web app features are enabled in the browser to avoid similar issues in the future. </p> <p>If you notice any vulnerabilities in Opera, you can reach out to us – find information on how to do that <a href="https://security.opera.com/en/">here</a>. We also have a bug bounty program, which you can check out <a href="https://bugcrowd.com/opera">here</a>. And of course, make sure to have the latest updates in your software installed – this is the best way to ensure you are protected!</p> <p>As always, stay safe out there!</p> <div class="entry-author "> <a href="https://blogs.opera.com/security/author/mtegos/"> <img class="avatar small" src="https://secure.gravatar.com/avatar/5f3b4cec87460e75740fa96dfa943985?s=120&d=mm&r=g" srcset="https://secure.gravatar.com/avatar/5f3b4cec87460e75740fa96dfa943985?s=120&d=mm&r=g 1x, https://secure.gravatar.com/avatar/5f3b4cec87460e75740fa96dfa943985?s=240&d=mm&r=g 2x" alt=""> <h1 class="job-position">Michael Tegos</h1> </a> <a href="https://blogs.opera.com/security/author/mtegos/"> <p class="desc">Product Marketing Manager at Opera</p> </a> </div> <hr> <div> <section id="feedback-container"> <header> <h3>User comments</h3> </header> <div id="nodebb-comments" data-url="https://forums.opera.com" data-site="blogs" data-page="security+601" ></div> <noscript><p class="js-disabled">Please enable JavaScript to view comments</p></noscript> </section> </div> </div> <div class="sidebar"> <div class="floating-section"> <div class="download-section"> <img src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/image-sidebar.96dd6c994fe0706fd5f588cef44c35b1.png"> <h3>You deserve<br>a better browser</h3> <p>Faster, safer and smarter than default browsers. Fully-featured for privacy, security, and so much more.</p> <span class="download-button--wrapper download-button--desktop download-button--full "> <a href="https://www.opera.com/download" target="_blank" class="button" rel="nofollow noopener" data-alternative="None"> <span class="cta"><span class="platform-icon">Download now</span> </a> </span> </div> </div> </div> </div> <hr> <div class="related-articles"> <div class="carousel"> <div class="posts-wrapper myslides fade row posts-a"> <article id="post-593" class="post-593 post type-post status-publish format-standard has-post-thumbnail hentry category-front-page category-privacy"> <header> <a href="https://blogs.opera.com/security/2024/09/opera-free-browser-vpn-no-log-audit-deloitte/"><img src="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/09/opera-free-vpn-no-log-audit-wide.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="Is Opera's VPN safe?" decoding="async" srcset="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/09/opera-free-vpn-no-log-audit-wide.jpg 1920w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/09/opera-free-vpn-no-log-audit-wide-300x169.jpg 300w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/09/opera-free-vpn-no-log-audit-wide-700x394.jpg 700w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/09/opera-free-vpn-no-log-audit-wide-768x432.jpg 768w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/09/opera-free-vpn-no-log-audit-wide-1536x864.jpg 1536w" sizes="(max-width: 1920px) 100vw, 1920px" /></a></header> <div class="post-body"> <p class="post-category"><a href="https://blogs.opera.com/security/category/privacy/">Privacy</a></p> <h2 class="post-title"> <a href="https://blogs.opera.com/security/2024/09/opera-free-browser-vpn-no-log-audit-deloitte/" rel="bookmark" title="Permanent Link to Protecting your privacy: Opera has completed an independent no-log audit of its free browser VPN">Protecting your privacy: Opera has completed an independent no-log audit of its free browser VPN</a> </h2> <time datetime="2024-09-25">September 25th, 2024</time> </div> <footer> </footer> </article> <article id="post-589" class="post-589 post type-post status-publish format-standard has-post-thumbnail hentry category-front-page category-news category-security tag-chromium tag-security tag-updates"> <header> <a href="https://blogs.opera.com/security/2024/08/update-your-browser-security-fixes-for-latest-chrome-zero-day-cve-2024-7971/"><img src="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green.png" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" srcset="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green.png 1920w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-300x169.png 300w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-700x394.png 700w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-768x432.png 768w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-1536x864.png 1536w" sizes="(max-width: 1920px) 100vw, 1920px" /></a></header> <div class="post-body"> <p class="post-category"><a href="https://blogs.opera.com/security/category/news/">News, </a><a href="https://blogs.opera.com/security/category/security/">Security</a></p> <h2 class="post-title"> <a href="https://blogs.opera.com/security/2024/08/update-your-browser-security-fixes-for-latest-chrome-zero-day-cve-2024-7971/" rel="bookmark" title="Permanent Link to Update your browser: Security fixes for latest Chrome zero-day">Update your browser: Security fixes for latest Chrome zero-day</a> </h2> <time datetime="2024-08-23">August 23rd, 2024</time> </div> <footer> </footer> </article> </div><div class="posts-wrapper myslides fade row posts-a"> <article id="post-577" class="post-577 post type-post status-publish format-standard has-post-thumbnail hentry category-privacy tag-vpn"> <header> <a href="https://blogs.opera.com/security/2024/06/tunnelvision-vulnerability-opera-vpn/"><img src="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/06/TunnelVision-vulnerability.png" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" srcset="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/06/TunnelVision-vulnerability.png 1920w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/06/TunnelVision-vulnerability-300x169.png 300w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/06/TunnelVision-vulnerability-700x394.png 700w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/06/TunnelVision-vulnerability-768x432.png 768w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/06/TunnelVision-vulnerability-1536x864.png 1536w" sizes="(max-width: 1920px) 100vw, 1920px" /></a></header> <div class="post-body"> <p class="post-category"><a href="https://blogs.opera.com/security/category/privacy/">Privacy</a></p> <h2 class="post-title"> <a href="https://blogs.opera.com/security/2024/06/tunnelvision-vulnerability-opera-vpn/" rel="bookmark" title="Permanent Link to Does the TunnelVision vulnerability affect Opera’s free VPN?">Does the TunnelVision vulnerability affect Opera’s free VPN?</a> </h2> <time datetime="2024-06-12">June 12th, 2024</time> </div> <footer> </footer> </article> <article id="post-564" class="post-564 post type-post status-publish format-standard has-post-thumbnail hentry category-news category-security tag-chromium tag-security tag-updates"> <header> <a href="https://blogs.opera.com/security/2024/01/update-your-browser-security-fixes-for-latest-chrome-zero-day-jan-2024/"><img src="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green.png" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" srcset="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green.png 1920w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-300x169.png 300w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-700x394.png 700w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-768x432.png 768w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-1536x864.png 1536w" sizes="(max-width: 1920px) 100vw, 1920px" /></a></header> <div class="post-body"> <p class="post-category"><a href="https://blogs.opera.com/security/category/news/">News, </a><a href="https://blogs.opera.com/security/category/security/">Security</a></p> <h2 class="post-title"> <a href="https://blogs.opera.com/security/2024/01/update-your-browser-security-fixes-for-latest-chrome-zero-day-jan-2024/" rel="bookmark" title="Permanent Link to Update your browser: Security fixes for latest Chrome zero-day">Update your browser: Security fixes for latest Chrome zero-day</a> </h2> <time datetime="2024-01-18">January 18th, 2024</time> </div> <footer> </footer> </article> </div><div class="posts-wrapper myslides fade row posts-a"> <article id="post-560" class="post-560 post type-post status-publish format-standard has-post-thumbnail hentry category-security"> <header> <a href="https://blogs.opera.com/security/2024/01/opera-misleading-headlines-myflaw-vulnerability/"><img src="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/01/MyFlaw-vulnerability.png" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="Opera’s response to misleading headlines regarding the “MyFlaw” security vulnerability" decoding="async" loading="lazy" srcset="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/01/MyFlaw-vulnerability.png 1920w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/01/MyFlaw-vulnerability-300x169.png 300w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/01/MyFlaw-vulnerability-700x394.png 700w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/01/MyFlaw-vulnerability-768x432.png 768w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2024/01/MyFlaw-vulnerability-1536x864.png 1536w" sizes="(max-width: 1920px) 100vw, 1920px" /></a></header> <div class="post-body"> <p class="post-category"><a href="https://blogs.opera.com/security/category/security/">Security</a></p> <h2 class="post-title"> <a href="https://blogs.opera.com/security/2024/01/opera-misleading-headlines-myflaw-vulnerability/" rel="bookmark" title="Permanent Link to Opera’s response to misleading headlines regarding the “MyFlaw” security vulnerability">Opera’s response to misleading headlines regarding the “MyFlaw” security vulnerability</a> </h2> <time datetime="2024-01-17">January 17th, 2024</time> </div> <footer> </footer> </article> <article id="post-557" class="post-557 post type-post status-publish format-standard has-post-thumbnail hentry category-news category-security tag-chromium tag-security tag-updates"> <header> <a href="https://blogs.opera.com/security/2023/12/update-your-browser-security-fixes-for-latest-chrome-zero-day/"><img src="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green.png" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="" decoding="async" loading="lazy" srcset="https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green.png 1920w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-300x169.png 300w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-700x394.png 700w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-768x432.png 768w, https://www-static-blogs.operacdn.com/security/wp-content/uploads/sites/6/2023/06/Opera-Security-Updates-Green-1536x864.png 1536w" sizes="(max-width: 1920px) 100vw, 1920px" /></a></header> <div class="post-body"> <p class="post-category"><a href="https://blogs.opera.com/security/category/news/">News, </a><a href="https://blogs.opera.com/security/category/security/">Security</a></p> <h2 class="post-title"> <a href="https://blogs.opera.com/security/2023/12/update-your-browser-security-fixes-for-latest-chrome-zero-day/" rel="bookmark" title="Permanent Link to Update your browser: Security fixes for latest Chrome zero-day">Update your browser: Security fixes for latest Chrome zero-day</a> </h2> <time datetime="2023-12-22">December 22nd, 2023</time> </div> <footer> </footer> </article> </div> <div class="controls"> <div class="dots"> </div> <div> <a class="prev minus-slide"> <img src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/arrow-left.171ab59fa709a3915488a44fbe586dba.svg" alt="control"/> </a> <a class="next plus-slide"> <img src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/arrow-right.22d48607ea14d7ce2603010ffc20d31d.svg" alt="control"/> </a> </div> </div> </div> </div> <hr>   <style> @font-face { font-display: block; font-family: Roboto; src: url(https://assets.brevo.com/font/Roboto/Latin/normal/normal/7529907e9eaf8ebb5220c5f9850e3811.woff2) format("woff2"), url(https://assets.brevo.com/font/Roboto/Latin/normal/normal/25c678feafdc175a70922a116c9be3e7.woff) format("woff") } @font-face { font-display: fallback; font-family: Roboto; font-weight: 600; src: url(https://assets.brevo.com/font/Roboto/Latin/medium/normal/6e9caeeafb1f3491be3e32744bc30440.woff2) format("woff2"), url(https://assets.brevo.com/font/Roboto/Latin/medium/normal/71501f0d8d5aa95960f6475d5487d4c2.woff) format("woff") } @font-face { font-display: fallback; font-family: Roboto; font-weight: 700; src: url(https://assets.brevo.com/font/Roboto/Latin/bold/normal/3ef7cf158f310cf752d5ad08cd0e7e60.woff2) format("woff2"), url(https://assets.brevo.com/font/Roboto/Latin/bold/normal/ece3a1d82f18b60bcce0211725c476aa.woff) format("woff") } #sib-container input:-ms-input-placeholder { text-align: left; font-family: "Helvetica", sans-serif; color: #c0ccda; } #sib-container input::placeholder { text-align: left; font-family: "Helvetica", sans-serif; color: #c0ccda; } #sib-container textarea::placeholder { text-align: left; font-family: "Helvetica", sans-serif; color: #c0ccda; } #sib-container a { text-decoration: underline; } </style> <link rel="stylesheet" href="https://sibforms.com/forms/end-form/build/sib-styles.css">   <div class="sib-form newsletter-widget" style="text-align: center; background-color: transparent; "> <div id="sib-form-container" class="sib-form-container"> <div id="error-message" class="sib-form-message-panel" style="font-size:16px; text-align:left; font-family:"Helvetica", sans-serif; color:#661d1d; background-color:#ffeded; border-radius:3px; border-color:#ff4949;"> <div class="sib-form-message-panel__text sib-form-message-panel__text--center"> <svg viewBox="0 0 512 512" class="sib-icon sib-notification__icon"> <path d="M256 40c118.621 0 216 96.075 216 216 0 119.291-96.61 216-216 216-119.244 0-216-96.562-216-216 0-119.203 96.602-216 216-216m0-32C119.043 8 8 119.083 8 256c0 136.997 111.043 248 248 248s248-111.003 248-248C504 119.083 392.957 8 256 8zm-11.49 120h22.979c6.823 0 12.274 5.682 11.99 12.5l-7 168c-.268 6.428-5.556 11.5-11.99 11.5h-8.979c-6.433 0-11.722-5.073-11.99-11.5l-7-168c-.283-6.818 5.167-12.5 11.99-12.5zM256 340c-15.464 0-28 12.536-28 28s12.536 28 28 28 28-12.536 28-28-12.536-28-28-28z" /> </svg> <span class="sib-form-message-panel__inner-text"> Your subscription could not be saved. Please try again. </span> </div> </div> <div></div> <div id="success-message" class="sib-form-message-panel" style="font-size:16px; text-align:left; font-family:"Helvetica", sans-serif; color:#085229; background-color:#e7faf0; border-radius:3px; border-color:#13ce66;max-width:540px;"> <div class="sib-form-message-panel__text sib-form-message-panel__text--center"> <svg viewBox="0 0 512 512" class="sib-icon sib-notification__icon"> <path d="M256 8C119.033 8 8 119.033 8 256s111.033 248 248 248 248-111.033 248-248S392.967 8 256 8zm0 464c-118.664 0-216-96.055-216-216 0-118.663 96.055-216 216-216 118.664 0 216 96.055 216 216 0 118.663-96.055 216-216 216zm141.63-274.961L217.15 376.071c-4.705 4.667-12.303 4.637-16.97-.068l-85.878-86.572c-4.667-4.705-4.637-12.303.068-16.97l8.52-8.451c4.705-4.667 12.303-4.637 16.97.068l68.976 69.533 163.441-162.13c4.705-4.667 12.303-4.637 16.97.068l8.451 8.52c4.668 4.705 4.637 12.303-.068 16.97z" /> </svg> <span class="sib-form-message-panel__inner-text"> Your subscription has been successful. </span> </div> </div> <div></div> <div id="sib-container" class="sib-container sib-container--large sib-container--vertical"> <form id="sib-form" method="POST" action="https://c9ba74d7.sibforms.com/serve/MUIFABLE65RsY6SozilAt8tV61PwBr2Mr2xYCrYWoucg8E5gPEov7bhzRQpocUuMRYLn7t8MnhDJJ9mfOxxd7ozSQcsACsv5-lIWCByMUxC2jjcSEb_7vREIMLswD5R19KKapZRHzkhD85VYcZAKEwog_HZT_twAUJ0LIiJ2h7n90fQw-TtftYJqz2nZ0zGArgzJ9vD_rpabna8W" data-type="subscription"> <div class="sib-container__title"> <div class="sib-container__title--heading"> <div class="sib-form-block"> <p>Sign up for our Newsletter and get the latest news from Opera</p> </div> </div> <div class="sib-container__title--subheading"> <div class="sib-form-block"> <div class="sib-text-form-block"> <p>Join the mailing list for regular updates on AI and Opera</p> </div> </div> </div> </div> <div class="sib-container__form"> <div> <div class="sib-input sib-form-block"> <div class="form__entry entry_block"> <div class="form__label-row "> <label class="entry__label" for="FIRSTNAME" data-required="*">Your name</label> <div class="entry__field"> <input class="input " maxlength="200" type="text" id="FIRSTNAME" name="FIRSTNAME" autocomplete="off" placeholder="Enter your name" data-required="true" required /> </div> </div> <label class="entry__error entry__error--primary"> </label> </div> </div> </div> <div> <div class="sib-input sib-form-block"> <div class="form__entry entry_block"> <div class="form__label-row "> <label class="entry__label" for="EMAIL" data-required="*">Your email</label> <div class="entry__field"> <input class="input " type="text" id="EMAIL" name="EMAIL" autocomplete="off" placeholder="Enter your email address" data-required="true" required /> </div> </div> <label class="entry__error entry__error--primary"> </label> </div> </div> </div> <div> <div class="sib-optin sib-form-block" data-required="true"> <div class="form__entry entry_mcq"> <div class="form__label-row "> <div class="entry__choice" style=""> <label> <input type="checkbox" class="input_replaced" value="1" id="OPT_IN" name="OPT_IN" required /> <span class="checkbox checkbox_tick_positive"></span><span><p>I agree to receive regular updates about Opera via electronic means (including email).</p><span data-required="*" style="display: inline;" class="entry__label entry__label_optin"></span></span> </label> </div> </div> <label class="entry__error entry__error--primary"> </label> </div> </div> </div> <div class="sib-container__form__submit-row"> <div class="sib-captcha sib-form-block"> <div class="form__entry entry_block"> <div class="form__label-row "> <script> function handleCaptchaResponse() { var event = new Event('captchaChange'); document.getElementById('sib-captcha').dispatchEvent(event); } </script> <div class="g-recaptcha sib-visible-recaptcha" id="sib-captcha" data-sitekey="6LeZlqwpAAAAAIGFJM8ip0dpMSup34t8iuFaz_qR" data-callback="handleCaptchaResponse" style="direction:ltr"></div> </div> <label class="entry__error entry__error--primary"> </label> </div> </div> <div class="sib-form-block" style="text-align: center"> <button class="sib-form-block__button sib-form-block__button-with-loader" form="sib-form" type="submit"> <svg class="icon clickable__icon progress-indicator__icon sib-hide-loader-icon" viewBox="0 0 512 512"> <path d="M460.116 373.846l-20.823-12.022c-5.541-3.199-7.54-10.159-4.663-15.874 30.137-59.886 28.343-131.652-5.386-189.946-33.641-58.394-94.896-95.833-161.827-99.676C261.028 55.961 256 50.751 256 44.352V20.309c0-6.904 5.808-12.337 12.703-11.982 83.556 4.306 160.163 50.864 202.11 123.677 42.063 72.696 44.079 162.316 6.031 236.832-3.14 6.148-10.75 8.461-16.728 5.01z" /> </svg> Sign up </button> </div> </div> <div class="sib-container__form__required-fields"> <p>*Required fields</p> <a href="https://legal.opera.com/privacy/" target="_blank">Please check our Privacy Policy to see how we process data.</a> </div> </div> <input type="text" name="email_address_check" value="" class="input--hidden"> <input type="hidden" name="locale" value="en"> </form> </div> </div> </div>   <script> window.REQUIRED_CODE_ERROR_MESSAGE = 'Please choose a country code'; window.LOCALE = 'en'; window.EMAIL_INVALID_MESSAGE = window.SMS_INVALID_MESSAGE = "The information provided is invalid. Please review the field format and try again."; window.REQUIRED_ERROR_MESSAGE = "This field cannot be left blank. "; window.GENERIC_INVALID_MESSAGE = "The information provided is invalid. Please review the field format and try again."; window.translation = { common: { selectedList: '{quantity} list selected', selectedLists: '{quantity} lists selected' } }; var AUTOHIDE = Boolean(1); </script> <script defer src="https://sibforms.com/forms/end-form/build/main.js"></script> <script src="https://www.google.com/recaptcha/api.js?hl=en"></script>   <div class="row bottom-widget"> <div class="img-wrapper col-xs-12 col-sm-12 col-md-12 col-lg-8" style="background-image: url('https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/image-bottom.46611fb4f576697e710382b83a2c3d75.png');"></div> <div class="info col-xs-12 col-sm-12 col-md-12 col-lg-4"> <a class="hf--brand" href="https://www.opera.com/"> <img alt="Opera" style="width: 13.2rem; background-position: center;" class="widget-image" src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/logo.e807fcd39b532b698412c37cd8017781.png" srcset=""> </a> <h1>You deserve a better browser</h1> <p>Opera's free VPN, Ad blocker, and Flow file sharing. Just a few of the must-have features built into Opera for faster, smoother and distraction-free browsing designed to improve your online experience.</p> <span class="download-button--wrapper download-button--desktop download-button--full "> <a href="https://www.opera.com/download" target="_blank" class="button" rel="nofollow noopener" data-alternative="None"> <span class="cta"><span class="platform-icon">Download now</span> </a> </span> </div> </div> </article> </div> <footer class="container-fluid footer"> <div class="breadcrumbs container-fluid wrapper"> <div class="breadcrumbs__container"> <div class="breadcrumbs__crumb breadcrumbs__logo breadcrumbs__sep"> <a href="https://blogs.opera.com/"> <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"> <path fill="#B3B3B3" fill-rule="evenodd" d="M8.03 0a7.97 7.97 0 0 1 5.302 2.036 5.773 5.773 0 0 0-3.206-.98c-1.905 0-3.612.945-4.76 2.436-.884 1.044-1.457 2.587-1.496 4.32v.377c.04 1.732.612 3.275 1.497 4.32 1.147 1.49 2.854 2.435 4.759 2.435 1.17 0 2.265-.357 3.203-.978-2.049.997-3.962.297-4.594-.14 2.015-.441 3.538-2.878 3.538-5.826 0-2.948-1.523-5.385-3.538-5.827.632-.436 2.545-1.136 4.597-.136a7.979 7.979 0 0 1 2.662 5.655L16 8c0 2.37-1.03 4.499-2.668 5.963l-.002.001-.226.196a7.967 7.967 0 0 1-5.485 1.83A8 8 0 0 1 8 0h.03z"></path> </svg> </a> </div> <ol itemscope="" itemtype="https://schema.org/BreadcrumbList">  <li itemprop="itemListElement" itemscope="" itemtype="https://schema.org/ListItem" class="breadcrumbs__sep"><div class="breadcrumbs__crumb"><a itemprop="item" href="https://blogs.opera.com/security/" class="hover-line"><span itemprop="name" class="hover-line__element">Opera Security</span></a><meta itemprop="position" content="1"></div></li><li itemprop="itemListElement" itemscope="" itemtype="https://schema.org/ListItem" class="breadcrumbs__sep"><div class="breadcrumbs__crumb"><span itemprop="name" class="hover-line__element"><a href="https://blogs.opera.com/security/category/news/">News, </a><a href="https://blogs.opera.com/security/category/security/">Security</a></span><meta itemprop="position" content="1"></div></li><li itemprop="itemListElement" itemscope="" itemtype="https://schema.org/ListItem" class="breadcrumbs__sep"><div class="breadcrumbs__crumb"><span itemprop="name" class="hover-line__element">Addressing the “CrossBarking” vulnerability discovered in collaboration with Guardio</span><meta itemprop="position" content="1"></div></li>  </ol> </div> </div> <div class="wrapper container-fluid"> <div class="footer__content"> <div class="row"> <div class="col-xs-12 col-lg-2"> <input id="hf-services-switcher" class="hf__dd-switcher hf-hide" type="checkbox"> <h4 class="hf__heading"> <label class="hf__label footer__label" for="hf-services-switcher">Services</label> </h4> <div class="hf__dd-content"> <ul class="hf__links list-style--none"> <li> <a class="hf__link hover-line" href="https://addons.opera.com/" target="_blank"> <span class="hover-line__element">Addons</span> </a> </li> <li> <a class="hf__link hover-line" href="https://auth.opera.com/" target="_blank" rel="nofollow noopener"> <span class="hover-line__element">Opera account</span> </a> </li> <li> <a class="hf__link hover-line" href="https://addons.opera.com/wallpapers" target="_blank"> <span class="hover-line__element">Wallpapers</span> </a> </li> <li> <a class="hf__link hover-line" href="https://www.opera.com/ads" target="_blank"> <span class="hover-line__element">Opera Ads</span> </a> </li> </ul> </div> </div> <div class="col-xs-12 col-lg-2"> <input id="hf-help-switcher" class="hf__dd-switcher hf-hide" type="checkbox"> <h4 class="hf__heading"> <label class="hf__label footer__label" for="hf-help-switcher">Help</label> </h4> <div class="hf__dd-content"> <ul class="hf__links list-style--none"> <li> <a class="hf__link hover-line" href="https://www.opera.com/help"> <span class="hover-line__element">Help & support</span> </a> </li> <li> <a class="hf__link hover-line" href="https://blogs.opera.com/" target="_blank"> <span class="hover-line__element">Opera blogs</span> </a> </li> <li> <a class="hf__link hover-line" href="https://forums.opera.com/" target="_blank"> <span class="hover-line__element">Opera forums</span> </a> </li> <li> <a class="hf__link hover-line" href="https://dev.opera.com/" target="_blank"> <span class="hover-line__element">Dev.Opera</span> </a> </li> <li> <a class="hf__link hover-line" href="https://help.opera.com/en/faq/" target="_blank"> <span class="hover-line__element">FAQ</span> </a> </li> </ul> </div> </div> <div class="col-xs-12 col-lg-2"> <input id="hf-legal-switcher" class="hf__dd-switcher hf-hide" type="checkbox"> <h4 class="hf__heading"> <label class="hf__label footer__label" for="hf-legal-switcher">Legal</label> </h4> <div class="hf__dd-content"> <ul class="hf__links list-style--none"> <li> <a class="hf__link hover-line" href="https://security.opera.com/" target="_blank" rel="nofollow"> <span class="hover-line__element">Security</span> </a> </li> <li> <a class="hf__link hover-line" href="https://www.opera.com/privacy" rel="nofollow"> <span class="hover-line__element">Privacy</span> </a> </li> <li> <a class="hf__link hover-line" href="https://www.opera.com/privacy/cookies" rel="nofollow"> <span class="hover-line__element">Cookies policy</span> </a> </li> <li> <a class="hf__link hover-line" href="https://www.opera.com/eula" rel="nofollow"> <span class="hover-line__element">EULA</span> </a> </li> <li> <a class="hf__link hover-line" href="https://www.opera.com/terms" rel="nofollow"> <span class="hover-line__element">Terms of Service</span> </a> </li> </ul> </div> </div> <div class="col-xs-12 col-lg-2 mb4"> <input id="hf-company-switcher" class="hf__dd-switcher hf-hide" type="checkbox"> <h4 class="hf__heading"> <label class="hf__label footer__label" for="hf-company-switcher">Company</label> </h4> <div class="hf__dd-content"> <ul class="hf__links list-style--none"> <li> <a class="hf__link hover-line" href="https://www.opera.com/about"> <span class="hover-line__element">About Opera</span> </a> </li> <li> <a class="hf__link hover-line" href="https://www.opera.com/newsroom"> <span class="hover-line__element">Press info</span> </a> </li> <li> <a class="hf__link hover-line" href="https://jobs.opera.com/" target="_blank"> <span class="hover-line__element">Jobs</span> </a> </li> <li> <a class="hf__link hover-line" href="https://investor.opera.com/" target="_blank"> <span class="hover-line__element">Investors</span> </a> </li> <li> <a class="hf__link hover-line" href="https://www.opera.com/b2b"> <span class="hover-line__element">Become a partner</span> </a> </li> <li> <a class="hf__link hover-line" href="https://www.opera.com/contact"> <span class="hover-line__element">Contact us</span> </a> </li> </ul> </div> </div> <div class="col-xs-12 col-lg-3 col-lg-offset-1 brand-wrapper"> <a class="hf--brand" href="https://www.opera.com/"> <img alt="Opera" style="width: 13.2rem" src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/img/logo.e807fcd39b532b698412c37cd8017781.png" srcset=""> </a> <p class="brand-wrapper__text"> Innovate and inspire, uncover the unexpected, support open standards. </p> <p class="footer__follow-label">Follow Opera</p> <div class="footer__social-icons"> <div class="footer__social-box"> <ul class="footer__social-icons "> <li> <a class="facebook" href="https://www.facebook.com/Opera/" rel="noopener nofollow" target="_blank" title="Opera - Facebook"> <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M20 12C20 7.58172 16.4183 4 12 4C7.58172 4 4 7.58172 4 12C4 15.993 6.92547 19.3027 10.75 19.9028V14.3125H8.71875V12H10.75V10.2375C10.75 8.2325 11.9444 7.125 13.7717 7.125C14.6467 7.125 15.5625 7.28125 15.5625 7.28125V9.25H14.5538C13.56 9.25 13.25 9.86672 13.25 10.5V12H15.4688L15.1141 14.3125H13.25V19.9028C17.0745 19.3027 20 15.993 20 12Z" fill="black"></path> </svg> </a> </li> <li> <a class="twitter" href="https://twitter.com/opera" rel="noopener nofollow" target="_blank" title="Opera - Twitter"> <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M21 6.59819C20.3379 6.86913 19.6257 7.05239 18.8788 7.13423C19.6414 6.71257 20.2267 6.04538 20.5029 5.24908C19.7893 5.63973 18.9986 5.92313 18.1578 6.07588C17.4842 5.41378 16.5244 5 15.4616 5C13.4225 5 11.7687 6.52626 11.7687 8.40811C11.7687 8.67523 11.8014 8.93524 11.8648 9.18483C8.79565 9.04276 6.07436 7.68602 4.25282 5.62347C3.935 6.12672 3.75269 6.71257 3.75269 7.33705C3.75269 8.51918 4.40512 9.56278 5.39548 10.1738C4.79042 10.1563 4.2206 10.003 3.72294 9.74705C3.72267 9.76154 3.72267 9.77602 3.72267 9.79026C3.72267 11.4416 4.99614 12.8189 6.68521 13.1318C6.37565 13.2101 6.04875 13.2515 5.71248 13.2515C5.47397 13.2515 5.24291 13.2304 5.01763 13.1907C5.48747 14.5444 6.85101 15.5298 8.46736 15.5575C7.20325 16.4718 5.61113 17.0164 3.88047 17.0164C3.58303 17.0164 3.28835 17.0004 3 16.9687C4.63343 17.936 6.57505 18.5 8.66042 18.5C15.453 18.5 19.1677 13.3069 19.1677 8.80282C19.1677 8.65515 19.1641 8.50799 19.157 8.3621C19.8791 7.88173 20.5051 7.28164 21 6.59819Z" fill="black"></path> </svg> </a> </li> <li> <a class="youtube" href="https://www.youtube.com/opera" rel="noopener nofollow" target="_blank" title="Opera - Youtube"> <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path fill-rule="evenodd" clip-rule="evenodd" d="M18.2602 6.33881C18.9455 6.52131 19.4859 7.05553 19.6703 7.73326C20.0131 8.97116 19.9999 11.5515 19.9999 11.5515C19.9999 11.5515 19.9999 14.1187 19.6705 15.3567C19.4859 16.0343 18.9456 16.5687 18.2602 16.751C17.0081 17.0769 12 17.0769 12 17.0769C12 17.0769 7.00487 17.0769 5.73974 16.7381C5.05432 16.5556 4.51404 16.0213 4.32947 15.3437C4 14.1187 4 11.5385 4 11.5385C4 11.5385 4 8.97116 4.32947 7.73326C4.51391 7.05565 5.0675 6.50827 5.73962 6.32589C6.99169 6 11.9998 6 11.9998 6C11.9998 6 17.0081 6 18.2602 6.33881ZM14.57 11.5384L10.4053 13.9102V9.16668L14.57 11.5384Z" fill="black"></path> </svg> </a> </li> <li> <a class="linkedin" href="https://www.linkedin.com/company/opera-software" rel="noopener nofollow" target="_blank" title="Opera - LinkedIn"> <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path fill-rule="evenodd" clip-rule="evenodd" d="M5 4C4.44772 4 4 4.44772 4 5V19C4 19.5523 4.44772 20 5 20H19C19.5523 20 20 19.5523 20 19V5C20 4.44772 19.5523 4 19 4H5ZM6.56756 6.90358C6.31045 7.14232 6.18188 7.44535 6.18188 7.81267C6.18188 8.17997 6.30677 8.48485 6.55654 8.72727C6.80631 8.96969 7.13321 9.09091 7.53726 9.09091H7.54828C7.96701 9.09091 8.30494 8.96969 8.56205 8.72727C8.81182 8.49218 8.93671 8.19834 8.93671 7.84573C8.93671 7.45637 8.80814 7.14049 8.55103 6.89807C8.30126 6.66298 7.97436 6.54545 7.57031 6.54545C7.15893 6.54545 6.82467 6.66482 6.56756 6.90358ZM6.32514 10.0937V17.4545H8.77142V10.0937H6.32514ZM12.5731 17.4545H10.1268C10.1415 15.236 10.1488 13.5133 10.1488 12.2865C10.1488 11.0597 10.1415 10.3287 10.1268 10.0937H12.5731V11.1405L12.562 11.1625H12.5731V11.1405C13.102 10.3251 13.8403 9.91735 14.7879 9.91735C15.6328 9.91735 16.3123 10.1983 16.8265 10.7603C17.3407 11.3223 17.5979 12.1469 17.5979 13.2342V17.4545H15.1516V13.5207C15.1516 12.4114 14.7402 11.8567 13.9174 11.8567C13.6015 11.8567 13.3389 11.9431 13.1295 12.1157C12.9202 12.2883 12.7641 12.4995 12.6612 12.7493C12.6025 12.8889 12.5731 13.0872 12.5731 13.3443V17.4545Z" fill="black"></path> </svg> </a> </li> <li> <a class="instagram" href="https://www.instagram.com/opera/" rel="noopener nofollow" target="_blank" title="Opera - Instagram"> <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path fill-rule="evenodd" clip-rule="evenodd" d="M6.76005 4.42003C7.26863 4.22229 7.85024 4.08724 8.70197 4.04847C9.55564 4.00905 9.8277 4 12.001 4C14.1736 4 14.4463 4.00969 15.2993 4.04847C16.1504 4.08659 16.732 4.22229 17.2412 4.42003C17.7666 4.62423 18.2132 4.89822 18.6578 5.34281C19.1024 5.78805 19.3757 6.23393 19.5806 6.75994C19.7783 7.2685 19.9134 7.85008 19.9522 8.70178C19.991 9.55477 20 9.82746 20 12C20 14.1725 19.991 14.4446 19.9522 15.2982C19.9141 16.1499 19.7783 16.7315 19.5806 17.2401C19.3757 17.7661 19.1024 18.2126 18.6578 18.6572C18.2125 19.1018 17.7666 19.3751 17.2406 19.58C16.732 19.7777 16.1504 19.9128 15.2987 19.9515C14.4457 19.991 14.1736 20 12.0003 20C9.8277 20 9.55564 19.9903 8.70197 19.9515C7.85024 19.9128 7.26928 19.7777 6.76005 19.58C6.23337 19.3751 5.78747 19.1018 5.34287 18.6572C4.89761 18.2126 4.62426 17.7661 4.42005 17.2401C4.2223 16.7315 4.08724 16.1499 4.04847 15.2982C4.00905 14.4452 4 14.1725 4 12C4 9.82746 4.00905 9.55477 4.04847 8.70178C4.08724 7.85008 4.2223 7.2685 4.42005 6.75994C4.62426 6.23328 4.89826 5.7874 5.34287 5.34281C5.78812 4.89822 6.23402 4.62423 6.76005 4.42003ZM8.76812 18.5118C7.98812 18.4763 7.56419 18.3464 7.28244 18.2365C6.90892 18.0911 6.64267 17.9179 6.36221 17.6381C6.08239 17.3583 5.90855 17.0921 5.7638 16.7186C5.65394 16.4368 5.52405 16.0129 5.4885 15.233C5.44973 14.3897 5.44198 14.1364 5.44198 12C5.44198 9.86366 5.45038 9.61099 5.4885 8.76705C5.52405 7.98708 5.65459 7.56382 5.7638 7.28143C5.9092 6.90792 6.08239 6.64169 6.36221 6.36123C6.64202 6.08143 6.90827 5.9076 7.28244 5.76285C7.56419 5.65299 7.98812 5.52311 8.76812 5.48757C9.61145 5.44879 9.86477 5.44104 12.0006 5.44104C14.137 5.44104 14.3897 5.44944 15.2336 5.48757C16.0136 5.52311 16.4369 5.65364 16.7193 5.76285C17.0929 5.9076 17.3591 6.08143 17.6396 6.36123C17.9194 6.64104 18.0926 6.90792 18.238 7.28143C18.3478 7.56317 18.4777 7.98708 18.5133 8.76705C18.552 9.61099 18.5598 9.86366 18.5598 12C18.5598 14.1357 18.552 14.389 18.5133 15.233C18.4777 16.0129 18.3472 16.4368 18.238 16.7186C18.0926 17.0921 17.9194 17.3583 17.6396 17.6381C17.3597 17.9179 17.0929 18.0911 16.7193 18.2365C16.4376 18.3464 16.0136 18.4763 15.2336 18.5118C14.3903 18.5506 14.137 18.5583 12.0006 18.5583C9.86477 18.5583 9.61145 18.5506 8.76812 18.5118ZM16.2714 8.68948C15.7409 8.68948 15.3111 8.25911 15.3111 7.72922C15.3111 7.19934 15.7409 6.76961 16.2714 6.76961C16.802 6.76961 17.2317 7.19934 17.2317 7.72922C17.2317 8.25911 16.8013 8.68948 16.2714 8.68948ZM7.89201 12C7.89201 14.2688 9.73118 16.1079 12.0001 16.1079C14.269 16.1079 16.1082 14.2688 16.1082 12C16.1082 9.73119 14.269 7.89209 12.0001 7.89209C9.73118 7.89209 7.89201 9.73119 7.89201 12ZM9.33398 12C9.33398 10.5273 10.5276 9.33313 12.0003 9.33313C13.4731 9.33313 14.6673 10.5273 14.6673 12C14.6673 13.4727 13.4731 14.6669 12.0003 14.6669C10.5276 14.6669 9.33398 13.4727 9.33398 12Z" fill="black"></path> </svg> </a> </li> </ul> </div> </div> </div> </div> </div> <div class="footer__bottom"> <div class="footer__company-box center-xs start-md color--black-30"> <p class="footer__company-box-p">© 1995-2022 Opera Norway </p> <p class="footer__company-box-p">All rights reserved</p> </div> </div> </div> </footer> </div> <script src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/js/carousel.6388ca3c7889892d8c6271de51156fea.js"></script> <script src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/js/comments.987d727013f0a1144b838015b222c255.js"></script> <script src="https://www-static-blogs.operacdn.com/security/wp-content/themes/opera-2022/static/js/scripts.64fe1c29ce935b1da52313c406b5f6a1.js"></script> </body> </html>

CINXE.COM

Addressing the "CrossBarking" vulnerability discovered in collaboration with Guardio | Opera Security