Yandex N.v. Yandex Browser For Desktop
7 CVEs affecting Yandex N.v. Yandex Browser For Desktop. Latest disclosed: 2018-01-19. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7327 | High | 7.8 | 2018-01-19 | Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmart… |
CVE-2016-8503 | High | 7.3 | 2016-10-26 | Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from… |
CVE-2016-8502 | High | 7.3 | 2016-10-26 | Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords fr… |
CVE-2016-8508 | Medium | 6.5 | 2017-03-01 | Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which… |
CVE-2016-8506 | Medium | 6.1 | 2016-10-26 | XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javasc… |
CVE-2016-8505 | Medium | 6.1 | 2016-10-26 | XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript c… |
CVE-2016-8504 | Medium | 4.3 | 2016-10-26 | CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile. |