Opera MyFlaw Bug Could Let Hackers Run ANY File on Your Mac or Windows

[[correlate]]

Content source

https://thehackernews.com/2024/01/opera-myflaw-bug-could-let-hackers-run.html

Cybersecurity researchers have disclosed a security flaw in the Opera web browser for Microsoft Windows and Apple macOS that could be exploited to execute any file on the underlying operating system.
The remote code execution vulnerability has been codenamed MyFlaw by the Guardio Labs research team owing to the fact that it takes advantage of a feature called My Flow that makes it possible to sync messages and files between mobile and desktop devices.

Opera MyFlaw Bug Could Let Hackers Run ANY File on Your Mac or Windows

Critical security flaw found in Opera Browsers. MyFlow sync feature lets attackers take over your Windows and macOS systems.

thehackernews.com

 

[Ink]

This has been patched?

The Guardio Labs research team uncovered a critical zero-day vulnerability in the popular Opera web browser family. This vulnerability allowed attackers to execute malicious files on Windows or MacOS systems using a specially crafted browser extension. This discovery not only highlights the vulnerability within Opera but also reflects a broader challenge in modern browser security.

Our proactive disclosure to Opera’s team and their swift response exemplifies the critical collaboration between security researchers and browser developers in protecting users. This write-up aims to shed light on the intricate details of the research process and discovered vulnerability as well as the ongoing efforts to safeguard digital experiences against evolving cyber threats.

From https://labs.guard.io/myflaw-cross-...ty-discovered-in-operas-browsers-099361a808ab

 

[silversurfer]

Yes, seems patched already since Opera v105, according to the source "TheHackerNews": Opera MyFlaw Bug Could Let Hackers Run ANY File on Your Mac or Windows

The issue impacts both the Opera browser and Opera GX. Following responsible disclosure on November 17, 2023, it was addressed as part of updates shipped on November 22, 2023.

 

[Ink]

Yes, seems patched already since Opera v105, according to the source "TheHackerNews": Opera MyFlaw Bug Could Let Hackers Run ANY File on Your Mac or Windows

Thanks, the thread title is misleading.