# CVEs published 2016-10-26

6 CVEs were published on October 26, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-8501](https://cve.now/CVE-2016-8501.md): Security WiFi bypass in Yandex Browser from version 15.10 to 15.12 allows remote attacker to sniff traffic in open or WEP-protected wi-fi ne (no CVSS, Yandex Browser for desktop Versions from 15.10 to)
- [CVE-2016-8502](https://cve.now/CVE-2016-8502.md): Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-f (no CVSS, Yandex N.V. Yandex Browser for desktop)
- [CVE-2016-8503](https://cve.now/CVE-2016-8503.md): Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forc (no CVSS, Yandex N.V. Yandex Browser for desktop)
- [CVE-2016-8504](https://cve.now/CVE-2016-8504.md): CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in brows (no CVSS, Yandex N.V. Yandex Browser for desktop)
- [CVE-2016-8505](https://cve.now/CVE-2016-8505.md): XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. (no CVSS, Yandex N.V. Yandex Browser for desktop)
- [CVE-2016-8506](https://cve.now/CVE-2016-8506.md): XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluati (no CVSS, Yandex N.V. Yandex Browser for desktop)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-10-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.