Skip to content
Yandex vulnerabilities
Newest
-
yandex punto switcher
Punto Switcher 4.5.0.583 Unquoted Search Path via WinExec
CVE-2026-25865
8.5 High
-
yandex database
Privilege escalation in Yandex Database
CVE-2026-10549
5.3 Medium
-
yandex messenger
Dylib Hijacking in Yandex Messenger
CVE-2025-5469
7.3 High
-
yandex telemost
Dylib Hijacking in Yandex Telemost
CVE-2025-5471
7.3 High
-
yandex disk
Dylib Hijacking in Yandex Disk
CVE-2025-5470
7.3 High
-
yandex telemost
DLL Hijacking in Yandex Telemost
CVE-2024-12168
8.4 High
-
lenovo browser
A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682
CVE-2023-26226
7.4 High
-
lenovo browser
Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.
CVE-2021-25262
6.9 Medium
-
yandex browser lite, browser +1 more
Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.
CVE-2021-25255
8.3 High
-
yandex browser lite, browser +1 more
Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.
CVE-2021-25254
8.2 High
-
lenovo browser
DLL Hijacking in Yandex Browser
CVE-2024-6473
Public exploit
8.4 High
-
yandex navigator
An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a...
CVE-2023-29751
5.5 Medium
-
yandex navigator
An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause...
CVE-2023-29749
7.8 High
-
yandex browser
Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local,...
CVE-2022-28225
7.8 High
-
yandex browser
Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local,...
CVE-2022-28226
7.8 High
-
yandex browser
Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local,...
CVE-2021-25261
7.8 High
-
clickhouse
Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The...
CVE-2021-42391
6.5 Medium
-
clickhouse
Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The...
CVE-2021-42390
6.5 Medium
-
clickhouse
Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first...
CVE-2021-42389
6.5 Medium
-
clickhouse, debian linux +1 more
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There...
CVE-2021-43305
Fix available
8.8 High
-
clickhouse, debian linux +1 more
Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There...
CVE-2021-43304
Fix available
8.8 High
-
clickhouse, debian linux +1 more
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As...
CVE-2021-42388
Fix available
8.1 High
-
clickhouse, debian linux +1 more
Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As...
CVE-2021-42387
Fix available
8.1 High
-
yandex browser
Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar
CVE-2020-27970
5.3 Medium
-
yandex browser, yandex n.v. browser for android +1 more
Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar...
CVE-2020-27969
7.3 High
-
yandex browser
Clickhouse prior to versions v20.8.18.32-lts, v21.1.9.41-stable, v21.2.9.41-stable, v21.3.6.55...
CVE-2021-25263
7.8 High
-
unknown rss for yandex turbo, yandex turbo +1 more
RSS for Yandex Turbo <= 1.30 - Authenticated Stored XSS
CVE-2021-24428
4.8 Medium
-
yandex browser
Yandex Browser Address Bar Spooofing
CVE-2020-7369
4.3 Medium
-
yandex tomita-parser, hackerone tomita-parser node module +1 more
Downloads Resources over HTTP in tomita-parser
CVE-2016-10666
8.1 High
-
yandex browser, yandex n.v. browser for desktop +1 more
Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an...
CVE-2017-7327
7.8 High
-
yandex browser, yandex n.v. browser for android +1 more
Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to...
CVE-2017-7326
7.5 High
-
yandex browser
Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.
CVE-2017-7325
7.5 High
-
yandex browser, yandex n.v. browser for desktop +1 more
Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in...
CVE-2016-8508
6.5 Medium
-
yandex browser, yandex n.v. browser for ios +1 more
Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime://...
CVE-2016-8507
6.5 Medium
-
yandex browser, yandex n.v. browser for desktop +1 more
XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2...
CVE-2016-8506
6.1 Medium
-
yandex n.v. browser for desktop, yandex yandex.browser +1 more
XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be...
CVE-2016-8505
6.1 Medium
-
yandex browser, yandex n.v. browser for desktop +1 more
CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by...
CVE-2016-8504
4.3 Medium
-
yandex browser, yandex n.v. browser for desktop +1 more
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9...
CVE-2016-8503
7.3 High
-
yandex browser, yandex n.v. browser for desktop +1 more
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2...
CVE-2016-8502
7.3 High
-
yandex browser
Security WiFi bypass in Yandex Browser from version 15.10 to 15.12 allows remote attacker to...
CVE-2016-8501
5.3 Medium
-
yandex yandex.server 2010
Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows...
CVE-2012-2941
Public exploit
4.3 Medium
-
yandex yandex.server
Multiple cross-site scripting (XSS) vulnerabilities in Yandex.Server allow remote attackers to...
CVE-2007-3485
4.3 Medium