Skip to content
OpenAdvisories

Vendor

Yandex

19 known vulnerabilities.

Products

clickhouse 7 Browser 3 Telemost 2 Browser Lite 2 Yandex Browser 1 Punto Switcher 1 Disk 1 Messenger 1 Yandex Database 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.8
    CVE-2026-25865

    Punto Switcher 4.5.0.583 Unquoted Search Path via WinExec

    Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the application's call to WinExec without a fully qualified path for RunDll32.exe when invoking shell32…

    Yandex Punto Switcher
  • High 7.3
    CVE-2025-5469

    Dylib Hijacking in Yandex Messenger

    Uncontrolled Search Path Element vulnerability in Yandex Messenger on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.245

    Yandex Messenger
  • High 7.3
    CVE-2025-5471

    Dylib Hijacking in Yandex Telemost

    Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1.

    Yandex Telemost
  • High 7.3
    CVE-2025-5470

    Dylib Hijacking in Yandex Disk

    Uncontrolled Search Path Element vulnerability in Yandex Disk on MacOS allows Search Order Hijacking.This issue affects Disk: before 3.2.45.3275.

    Yandex Disk
  • High 8.4
    CVE-2024-12168

    DLL Hijacking in Yandex Telemost

    Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used.

    Yandex Telemost
  • High 7.4
    CVE-2023-26226

    A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682

    A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682

    Yandex Browser
  • High 8.3
    CVE-2021-25255

    Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.

    Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.

    Yandex Browser Lite
  • High 8.2
    CVE-2021-25254

    Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

    Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

    Yandex Browser Lite
  • High 8.4
    CVE-2024-6473 Public exploit

    DLL Hijacking in Yandex Browser

    Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used.

    Yandex Browser