CVE-2016-8508

—

CVSS 3.1

6.5 medium

EPSS

2%p74

Published

Mar 1, 2017 (Mar 1, 2017)

Modified

Jun 17, 2026

Description

Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.

Vendors: yandex
Products: yandex browser
Weakness: CWE-254
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.