CVE-2012-1926: Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState a...

Security readout for executives and security teams

This is an old Opera browser flaw. A malicious site could bypass the Same Origin Policy in Opera before 11.62 and read history.state data across domains. That data exposure is limited by what sites store there, but the browser security boundary failure is meaningful. Exposure is likely limited to legacy systems running Opera versions earlier than 11.62. Modern managed endpoints are unlikely to be affected, but older kiosk images, lab machines, archived VMs, and unmanaged desktops should be checked. Treat as a legacy exposure cleanup item. It becomes urgent only if Opera before 11.62 exists in environments that browse untrusted sites or handle sensitive web sessions. Mitigation focus: Identify and remove Opera versions earlier than 11.62.; Upgrade affected Opera installations to 11.62 or later where still applicable.; Replace unsupported legacy Opera builds with a supported browser..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.