Vulnerability index

Browse CVEs

26 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Yandex Telemost HIGH 7.8
CVE-2025-5471

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1.

Fix: 2.19.1+
Fix from $1,950 2025-12-09
Yandex Telemost HIGH 7.8
CVE-2024-12168

Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used.

Mitigation only
Fix from $1,950 2025-06-02
Yandex Browser CRITICAL 9.8
CVE-2023-26226

A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682

Fix: 24.4.0.682+
Fix from $2,300 2025-05-30
Yandex Browser HIGH 7.5
CVE-2021-25255

Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.

Fix: 21.1.0+
Fix from $1,950 2025-05-21
Yandex Browser MEDIUM 5.4
CVE-2021-25262

Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.

Fix: 21.3.0+
Fix from $1,600 2025-05-21
Yandex Browser MEDIUM 5.3
CVE-2021-25254

Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

Fix: 21.1.0+
Fix from $1,600 2025-05-21
Yandex Browser HIGH 7.8
CVE-2024-6473

Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used.

Fix: 24.7.1.380+
Fix from $1,950 2024-09-03
Navigator MEDIUM 5.5
CVE-2023-29751

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPref…

No fix yet
Fix from $1,600 2023-06-09
Navigator HIGH 7.8
CVE-2023-29749

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPre…

No fix yet
Fix from $1,950 2023-06-09
Yandex Browser HIGH 7.8
CVE-2021-25261

Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code wit…

Fix: 22.5.0.862+
Fix from $1,950 2022-06-15
Yandex Browser HIGH 7.8
CVE-2022-28225

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code wit…

Fix: 22.3.3.684+
Fix from $1,950 2022-06-15
Yandex Browser HIGH 7.8
CVE-2022-28226

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code wit…

Fix: 22.3.3.801+
Fix from $1,950 2022-06-15
Yandex Browser MEDIUM 5.3
CVE-2020-27970

Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar

Fix: 20.10.0+
Fix from $1,600 2021-09-13
Yandex Browser HIGH 7.3
CVE-2020-27969

Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing

Fix: 20.8.4+
Fix from $1,950 2021-09-13
Yandex Browser HIGH 7.8
CVE-2021-25263

Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker to execute arbitary code wit…

Fix: 21.9.0.390+
Fix from $1,950 2021-08-17
Tomita Parser HIGH 8.1
CVE-2016-10666

tomita-parser is a Node wrapper for Yandex Tomita Parser tomita-parser downloads binary resources over HTTP, which leaves it vulnerable to MITM attac…

Fix: after 0.0.3
Fix from $1,950 2018-05-29
Yandex Browser HIGH 7.8
CVE-2017-7327

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.d…

Fix: after 17.4.0.16
Fix from $1,950 2018-01-19
Yandex Browser HIGH 7.5
CVE-2017-7325

Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.

Fix: 16.9.0+
Fix from $1,950 2018-01-19
Yandex Browser HIGH 7.5
CVE-2017-7326

Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted …

Fix: after 17.4
Fix from $1,950 2018-01-19
Yandex Browser MEDIUM 6.5
CVE-2016-8507

Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facet…

Fix: 16.10.0.2357+
Fix from $1,600 2017-03-01
Yandex Browser MEDIUM 6.5
CVE-2016-8508

Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-t…

Fix: 17.1.1.227+
Fix from $1,600 2017-03-01
Yandex Browser MEDIUM 6.1
CVE-2016-8506

XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitr…

Mitigation only
Fix from $1,600 2016-10-26
Yandex.browser MEDIUM 6.1
CVE-2016-8505

XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary ja…

Fix: after 16.4.0.94.4
Fix from $1,600 2016-10-26
Yandex Browser HIGH 7.3
CVE-2016-8503

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passw…

Mitigation only
Fix from $1,950 2016-10-26
Yandex Browser HIGH 7.3
CVE-2016-8502

Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing pa…

Mitigation only
Fix from $1,950 2016-10-26
Yandex Browser MEDIUM 5.3
CVE-2016-8501

Security WiFi bypass in Yandex Browser from version 15.10 to 15.12 allows remote attacker to sniff traffic in open or WEP-protected wi-fi networks de…

Mitigation only
Fix from $1,600 2016-10-26