CVE-2016-8508

2017-03-0115:00:00

yandex

www.cve.org

0.001 Low

EPSS

Percentile

49.9%

JSON

Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.

CNA Affected

[
  {
    "product": "Yandex Browser for desktop",
    "vendor": "Yandex N.V.",
    "versions": [
      {
        "status": "affected",
        "version": "before 17.1.1.227 for OSx and Windows"
      }
    ]
  }
]

References

www.securityfocus.com/bid/96514

yandex.com/blog/security-changelogs/fixed-in-version-17-1

0.001 Low

EPSS

Percentile

49.9%

JSON

Related for CVELIST:CVE-2016-8508