CVE-2016-8503: Yandex Browser

High severity, CVSS 7.3. EPSS: 1% chance of exploitation in the next 30 days.

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.

Affected products

• Yandex Yandex Browser: version 16.7.0.3342 only; version 16.7.1.20808 only; version 16.9.1.1131 only

Published 2016-10-26. Last modified 2026-06-17.