CVE-2016-8508: Yandex Browser

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.

Affected products

• Yandex Yandex Browser: before 17.1.1.227 (fixed in 17.1.1.227)

Published 2017-03-01. Last modified 2026-06-17.