CVE-2016-8505

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-10-26 · updated 2026-06-17
Weakness: CWE-79

Description

XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.

Affected products

Yandex.Browser: through 16.4.0.94.4

References

http://www.securityfocus.com/bid/93925
https://browser.yandex.com/security/changelogs/
http://www.securityfocus.com/bid/93925
https://browser.yandex.com/security/changelogs/

Get alerted when CVE-2016-8505 or the next vulnerability affects your stack