Approved changes feed: RSS · Atom

cpe:2.3:a:yandex:yandex_browser:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYandex (694d67c2-958c-56da-ba5e-25307fedecef)
ProductYandex Browser (79febb20-c6f9-5bb7-8ded-849158d59a25)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6473 vulnerable 2026-06-08 06:58:19.550659 DLL Hijacking in Yandex Browser
Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used.
Published: 2024-09-03T10:35:59.145Z
Updated: 2024-09-03T13:55:15.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28226 vulnerable 2026-06-08 05:42:44.274884 Details available
Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating temporary files in directory with insecure permissions during Yandex Browser update process.
Published: 2022-06-15T19:06:17.000Z
Updated: 2024-08-03T05:48:37.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28225 vulnerable 2026-06-08 05:42:44.274351 Details available
Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process.
Published: 2022-06-15T19:10:32.000Z
Updated: 2024-08-03T05:48:37.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25262 vulnerable 2026-06-08 05:30:40.559800 Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.
Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.
Published: 2025-05-21T07:07:29.310Z
Updated: 2025-05-21T13:51:43.378Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25261 vulnerable 2026-06-08 05:30:40.558168 Details available
Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process.
Published: 2022-06-15T19:05:54.000Z
Updated: 2024-08-03T19:56:11.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7369 vulnerable 2026-06-08 05:27:13.000783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27970 vulnerable 2026-06-08 05:23:53.608672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7327 vulnerable 2026-06-08 05:09:55.764671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7325 vulnerable 2026-06-08 05:09:55.761893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8508 vulnerable 2026-06-08 05:08:14.345029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8504 vulnerable 2026-06-08 05:08:14.338390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.