CVE-2016-8503

Published: Oct 26, 2016Modified: May 6, 2026

7.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: NVD

Description

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.

Affected (3)

Products: Yandex: Yandex Browser

Yandex

1 product

Yandex Browser

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Yandex Yandex Browser	Version 16.7.0.3342
Yandex Yandex Browser	Version 16.7.1.20808
Yandex Yandex Browser	Version 16.9.1.1131

Related CWEs

CWE-254

References (4)

http://www.securityfocus.com/bid/93921

Source: browser-security@yandex-team.ru

Third Party AdvisoryVDB Entry

https://browser.yandex.com/security/changelogs/

Source: browser-security@yandex-team.ru

Release NotesVendor Advisory

http://www.securityfocus.com/bid/93921

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://browser.yandex.com/security/changelogs/

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.