Read the docs
TI-2009-01976 Aliases CVE-2009-2068GHSA-pc96-724m-2vxp

Google Chrome detects http content in https web pages only when the top-level frame uses…

Priority LOW 29CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."

Why it matters now

EPSS 0.01242 69th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 75

CPEVersionsRoleVendor
cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*5..10VulnerableOpera
cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*5.0VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_2:*:*:*:*:*:*5.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_3:*:*:*:*:*:*5.0 beta_3VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_4:*:*:*:*:*:*5.0 beta_4VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_5:*:*:*:*:*:*5.0 beta_5VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_6:*:*:*:*:*:*5.0 beta_6VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_7:*:*:*:*:*:*5.0 beta_7VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_8:*:*:*:*:*:*5.0 beta_8VulnerableOpera
cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*5.1VulnerableOpera
  • cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:* Versions 5..10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_2:*:*:*:*:*:* Versions 5.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_3:*:*:*:*:*:* Versions 5.0 beta_3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_4:*:*:*:*:*:* Versions 5.0 beta_4 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_5:*:*:*:*:*:* Versions 5.0 beta_5 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_6:*:*:*:*:*:* Versions 5.0 beta_6 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_7:*:*:*:*:*:* Versions 5.0 beta_7 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_8:*:*:*:*:*:* Versions 5.0 beta_8 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Opera
Show 65 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:opera:opera:5.02:*:*:*:*:*:*:*5.02VulnerableOpera
cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*5.2VulnerableOpera
cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*5.3VulnerableOpera
cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*5.4VulnerableOpera
cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*5.5VulnerableOpera
cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*5.6VulnerableOpera
cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*5.7VulnerableOpera
cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*5.8VulnerableOpera
cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*5.9VulnerableOpera
cpe:2.3:a:opera:opera:5.10:*:*:*:*:*:*:*5.10VulnerableOpera
cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*5.11VulnerableOpera
cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*5.12VulnerableOpera
cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*6 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*6.0VulnerableOpera
cpe:2.3:a:opera:opera:6.0:beta_1:*:*:*:*:*:*6.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:6.0:beta_2:*:*:*:*:*:*6.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:6.0:beta_3:*:*:*:*:*:*6.0 beta_3VulnerableOpera
cpe:2.3:a:opera:opera:6.1:*:*:*:*:*:*:*6.1VulnerableOpera
cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*6.01VulnerableOpera
cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*6.02VulnerableOpera
cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*6.03VulnerableOpera
cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*6.04VulnerableOpera
cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*6.05VulnerableOpera
cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*6.06VulnerableOpera
cpe:2.3:a:opera:opera:6.11:*:*:*:*:*:*:*6.11VulnerableOpera
cpe:2.3:a:opera:opera:6.12:*:*:*:*:*:*:*6.12VulnerableOpera
cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*7 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*7.0VulnerableOpera
cpe:2.3:a:opera:opera:7.0:beta_1:*:*:*:*:*:*7.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:7.0:beta_1v2:*:*:*:*:*:*7.0 beta_1v2VulnerableOpera
cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*7.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*7.01VulnerableOpera
cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*7.02VulnerableOpera
cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*7.03VulnerableOpera
cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*7.10VulnerableOpera
cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*7.11VulnerableOpera
cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*7.20VulnerableOpera
cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*7.20 beta7VulnerableOpera
cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*7.21VulnerableOpera
cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*7.22VulnerableOpera
cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*7.23VulnerableOpera
cpe:2.3:a:opera:opera:7.30:*:*:*:*:*:*:*7.30VulnerableOpera
cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*7.50VulnerableOpera
cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*7.50 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*7.51VulnerableOpera
cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*7.52VulnerableOpera
cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*7.54VulnerableOpera
cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*7.54 update_1VulnerableOpera
cpe:2.3:a:opera:opera:7.55:*:*:*:*:*:*:*7.55VulnerableOpera
cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*8.0VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*8.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*8.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*8.01VulnerableOpera
cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*8.02VulnerableOpera
cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*8.51VulnerableOpera
cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*8.52VulnerableOpera
cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*8.53VulnerableOpera
cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*8.54VulnerableOpera
cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*9.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*9.01VulnerableOpera
cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*9.02VulnerableOpera
cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*9.10VulnerableOpera
cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*9.20VulnerableOpera
cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*9.21VulnerableOpera
cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*9.23VulnerableOpera
  • cpe:2.3:a:opera:opera:5.02:*:*:*:*:*:*:* Versions 5.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:* Versions 5.3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:* Versions 5.4 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:* Versions 5.5 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:* Versions 5.9 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.10:*:*:*:*:*:*:* Versions 5.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:* Versions 5.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:* Versions 5.12 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:* Versions 6 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.0:beta_1:*:*:*:*:*:* Versions 6.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.0:beta_2:*:*:*:*:*:* Versions 6.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.0:beta_3:*:*:*:*:*:* Versions 6.0 beta_3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:* Versions 6.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:* Versions 6.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:* Versions 6.03 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:* Versions 6.04 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:* Versions 6.05 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:* Versions 6.06 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.11:*:*:*:*:*:*:* Versions 6.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.12:*:*:*:*:*:*:* Versions 6.12 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:* Versions 7 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:beta_1:*:*:*:*:*:* Versions 7.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:beta_1v2:*:*:*:*:*:* Versions 7.0 beta_1v2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:* Versions 7.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:* Versions 7.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:* Versions 7.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:* Versions 7.03 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:* Versions 7.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:* Versions 7.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:* Versions 7.20 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:* Versions 7.20 beta7 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:* Versions 7.21 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:* Versions 7.22 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:* Versions 7.23 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.30:*:*:*:*:*:*:* Versions 7.30 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:* Versions 7.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:* Versions 7.50 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:* Versions 7.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:* Versions 7.52 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:* Versions 7.54 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:* Versions 7.54 update_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.55:*:*:*:*:*:*:* Versions 7.55 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:* Versions 8.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:* Versions 8.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:* Versions 8.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:* Versions 8.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:* Versions 8.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:* Versions 8.52 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:* Versions 8.53 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:* Versions 8.54 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:* Versions 9.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:* Versions 9.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:* Versions 9.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:* Versions 9.20 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:* Versions 9.21 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:* Versions 9.23 Vulnerable ·Opera

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-2068
  2. 2026-10-03 Alias added: GHSA-pc96-724m-2vxp

References

Other 2

  • TI-2008-04929 Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute… CVSS 2.0HIGH 9.3
  • TI-2008-04479 Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote… CVSS 2.0MEDIUM 4.3
  • TI-2008-04094 Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol… CVSS 2.0HIGH 10.0
  • TI-2008-01689 Opera before 9.27 allows remote attackers to cause a denial of service (crash) and… CVSS 2.0HIGH 9.3
  • TI-2008-04478 Opera before 9.60 allows remote attackers to obtain sensitive information and have… CVSS 2.0HIGH 9.3
  • TI-2008-02947 Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute… CVSS 2.0HIGH 10.0
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences