CVE-2016-8505: XSS
Published Oct 26, 2016
·Updated
XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.
Affected Software
1 affected component
Yandex Yandex.browser<=16.4.0.94.4
Event History
Oct 26, 2016
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-8505?
CVE-2016-8505 is classified as a high severity vulnerability due to its potential for remote code execution via cross-site scripting.
2
What versions of Yandex Browser are affected by CVE-2016-8505?
CVE-2016-8505 affects Yandex Browser versions prior to 16.6.
3
How do I fix CVE-2016-8505?
To fix CVE-2016-8505, update your Yandex Browser to version 16.6 or later.
4
What type of vulnerability is CVE-2016-8505?
CVE-2016-8505 is an XSS vulnerability that allows remote attackers to execute arbitrary JavaScript code.
5
Can CVE-2016-8505 be exploited remotely?
Yes, CVE-2016-8505 can be exploited by remote attackers.