CVE-2016-8506

2016-10-2618:00:00

yandex

www.cve.org

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

41.1%

JSON

XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javascript code.

CNA Affected

[
  {
    "product": "Yandex Browser for desktop",
    "vendor": "Yandex N.V.",
    "versions": [
      {
        "status": "affected",
        "version": "15.12 to 16.2 for OSx and Linux"
      }
    ]
  }
]

References

www.securityfocus.com/bid/93927

browser.yandex.com/security/changelogs/