Yandex Yandex Browser
22 CVEs affecting Yandex Yandex Browser. Latest disclosed: 2025-05-30. Critical: 1, High: 12.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-26226 | Critical | 9.8 | 2025-05-30 | A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682 |
CVE-2024-6473 | High | 7.8 | 2024-09-03 | Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used. |
CVE-2022-28226 | High | 7.8 | 2022-06-15 | Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYST… |
CVE-2022-28225 | High | 7.8 | 2022-06-15 | Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYST… |
CVE-2021-25261 | High | 7.8 | 2022-06-15 | Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code with the SYST… |
CVE-2021-25263 | High | 7.8 | 2021-08-17 | Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker to execute arbitary code with the SYST… |
CVE-2017-7327 | High | 7.8 | 2018-01-19 | Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmart… |
CVE-2021-25255 | High | 7.5 | 2025-05-21 | Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service. |
CVE-2017-7326 | High | 7.5 | 2018-01-19 | Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page |
CVE-2017-7325 | High | 7.5 | 2018-01-19 | Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open. |
CVE-2020-27969 | High | 7.3 | 2021-09-13 | Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing |
CVE-2016-8503 | High | 7.3 | 2016-10-26 | Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from… |
CVE-2016-8502 | High | 7.3 | 2016-10-26 | Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords fr… |
CVE-2016-8508 | Medium | 6.5 | 2017-03-01 | Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which… |
CVE-2016-8507 | Medium | 6.5 | 2017-03-01 | Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call w… |
CVE-2016-8506 | Medium | 6.1 | 2016-10-26 | XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javasc… |
CVE-2021-25262 | Medium | 5.4 | 2025-05-21 | Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack. |
CVE-2021-25254 | Medium | 5.3 | 2025-05-21 | Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar. |
CVE-2020-27970 | Medium | 5.3 | 2021-09-13 | Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar |
CVE-2016-8501 | Medium | 5.3 | 2016-10-26 | Security WiFi bypass in Yandex Browser from version 15.10 to 15.12 allows remote attacker to sniff traffic in open or WEP-protected wi-fi networks despite of s… |