Yandex Browser For Desktop
Approved changes feed: RSS · Atom
cpe:2.3:a:yandex_n.v.:yandex_browser_for_desktop:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Yandex N.V. (5be87525-bf53-5ffe-b365-bce0f61530b3) |
|---|---|
| Product | Yandex Browser For Desktop (9a408f3b-79b3-52e7-a7d7-6f1565a7cb04) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7327 |
vulnerable | 2026-06-08 05:09:55.764625 |
Details available
Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll.
Published: 2018-01-19T17:00:00.000Z
Updated: 2024-09-16T21:57:43.175Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8508 |
vulnerable | 2026-06-08 05:08:14.344992 |
Details available
Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.
Published: 2017-03-01T15:00:00.000Z
Updated: 2024-08-06T02:27:40.931Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8506 |
vulnerable | 2026-06-08 05:08:14.340056 |
Details available
XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javascript code.
Published: 2016-10-26T18:00:00.000Z
Updated: 2024-08-06T02:27:40.870Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8505 |
vulnerable | 2026-06-08 05:08:14.338738 |
Details available
XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.
Published: 2016-10-26T18:00:00.000Z
Updated: 2024-08-06T02:27:39.642Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8504 |
vulnerable | 2026-06-08 05:08:14.337506 |
Details available
CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.
Published: 2016-10-26T18:00:00.000Z
Updated: 2024-08-06T02:27:40.997Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8503 |
vulnerable | 2026-06-08 05:08:14.334764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8502 |
vulnerable | 2026-06-08 05:08:14.333422 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.