CVE-2016-8504

CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.

• CWE-352

• http://www.securityfocus.com/bid/93924Third Party Advisory, VDB Entry
• https://browser.yandex.com/security/changelogs/Release Notes, Vendor Advisory
• http://www.securityfocus.com/bid/93924Third Party Advisory, VDB Entry
• https://browser.yandex.com/security/changelogs/Release Notes, Vendor Advisory

Published

Oct 26, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8498Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8499Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8500Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8501Security WiFi bypass in Yandex Browser from version 15.10 to…
• CVE-2016-8502Yandex Protect Anti-phishing warning in Yandex Browser for d…
• CVE-2016-8503Yandex Protect Anti-phishing warning in Yandex Browser for d…
• CVE-2016-8505XSS in Yandex Browser BookReader in Yandex browser for deskt…
• CVE-2016-8506XSS in Yandex Browser Translator in Yandex browser for deskt…
• CVE-2016-8507Yandex Browser for iOS before 16.10.0.2357 does not properly…6.5
• CVE-2016-8508Yandex Browser for desktop before 17.1.1.227 does not show P…6.5
• CVE-2016-8509Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8510Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…