← Back

CVE-2016-8506

nvd nist
Published: Oct 26, 2016Modified: May 6, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javascript code.

Affected (6)

Yandex
1 product
Yandex Browser
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Yandex
Yandex Browser
Version 15.12.0.6151
Yandex Browser
Version 15.12.1.6475
Yandex Browser
Version 15.2.2214.3645
Yandex Browser
Version 15.4.2272.3429
Yandex Browser
Version 15.6.2311.5029
Yandex Browser
Version 16.2.0.3539

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

Source: browser-security@yandex-team.ru
Third Party AdvisoryVDB Entry
Source: browser-security@yandex-team.ru
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory

Timeline

No history available yet.