CVE-2016-8502

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.

Score

CVSS 3.0 7.3 High

Status

Modified - browser-security@yandex-team.ru

Published

2016-10-26

Last modified

2024-08-06

Weaknesses

CWE-254

Affected products

• Yandex Browser (Yandex)
• Yandex Browser For Desktop (Yandex N.v.)

References

• http://www.securityfocus.com/bid/93923
• https://browser.yandex.com/security/changelogs/