CVE-2016-8507

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Mar 1, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-85086.5Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special CVE-2016-85119.8A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.CVE-2016-85129.8A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found.CVE-2016-85138.0A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versio CVE-2016-85146.5A remote information disclosure in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.CVE-2016-85158.8A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions pr CVE-2016-85167.5A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.CVE-2016-85176.1A cross site scripting vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.CVE-2016-85187.5A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.CVE-2016-85199.8A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found.CVE-2016-85208.8HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some c CVE-2016-85216.5A Remote click jacking vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.