CVE-2016-8503 - Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript

Back Back to CVE browser

HIGH

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript

Published Oct 26, 2016

7.3

HIGH

CVSS 3.0

EPSS 1.00%

Description

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.

Affected products

Vendor Yandex N.V. Product Yandex Browser for desktop Default
n/a
- Version
  16.7 to 16.9 for Windows and OSx.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Yandex N.V.

Yandex Browser for desktop

n/a

Version	Status	Constraints
16.7 to 16.9 for Windows and OSx.	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-254

References (2)

http://www.securityfocus.com/bid/93921
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://browser.yandex.com/security/changelogs/
x_refsource_CONFIRMRelease NotesVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/93921		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://browser.yandex.com/security/changelogs/		x_refsource_CONFIRMRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner yandex

Published Oct 26, 2016

Updated Aug 6, 2024

Reserved Oct 7, 2016

Link CVE-2016-8503

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2016-8503

Red Hat

Severity n/a

Public date n/a

Links CVE-2016-8503