CVE-2016-8508

6.5 mediumEPSS 1.6%

Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-254
Published: 2017-03-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

yandex:yandex_browser

References

http://www.securityfocus.com/bid/96514
https://yandex.com/blog/security-changelogs/fixed-in-version-17-1
http://www.securityfocus.com/bid/96514
https://yandex.com/blog/security-changelogs/fixed-in-version-17-1

Check your stack JSON