Yandex Browser Vulnerability: Bypassing Protect Warnings for Malicious Websites

Yandex Browser Vulnerability: Bypassing Protect Warnings for Malicious Websites

CVE-2016-8508 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.

Learn more about our Cis Benchmark Audit For Desktop Software.