CVE-2016-8505

—

CVSS 3.0

6.1 medium

EPSS

<1%p56

Published

Oct 26, 2016 (Oct 26, 2016)

Modified

Jun 17, 2026

Description

XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.

Vendors: yandex
Products: yandex.browser
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.