CVE-2016-8502

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.

• CWE-254

• http://www.securityfocus.com/bid/93923Third Party Advisory, VDB Entry
• https://browser.yandex.com/security/changelogs/Release Notes, Vendor Advisory
• http://www.securityfocus.com/bid/93923Third Party Advisory, VDB Entry
• https://browser.yandex.com/security/changelogs/Release Notes, Vendor Advisory

Published

Oct 26, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8496Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8497Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8498Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8499Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8500Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8501Security WiFi bypass in Yandex Browser from version 15.10 to…
• CVE-2016-8503Yandex Protect Anti-phishing warning in Yandex Browser for d…
• CVE-2016-8504CSRF of synchronization form in Yandex Browser for desktop b…
• CVE-2016-8505XSS in Yandex Browser BookReader in Yandex browser for deskt…
• CVE-2016-8506XSS in Yandex Browser Translator in Yandex browser for deskt…
• CVE-2016-8507Yandex Browser for iOS before 16.10.0.2357 does not properly…6.5
• CVE-2016-8508Yandex Browser for desktop before 17.1.1.227 does not show P…6.5