Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
yandex yandex browser vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv2
CVE-2022-28225
Local privilege vulnerability in Yandex Browser for Windows before 22.3.3.684 allows a local, low privileged, malicious user to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process.
Yandex Yandex Browser
7.2
CVSSv2
CVE-2022-28226
Local privilege vulnerability in Yandex Browser for Windows before 22.3.3.801 allows a local, low privileged, malicious user to execute arbitary code with the SYSTEM privileges through manipulating temporary files in directory with insecure permissions during Yandex Browser updat...
Yandex Yandex Browser
4.3
CVSSv2
CVE-2016-8507
Yandex Browser for iOS prior to 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote malicious users to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site.
Yandex Yandex Browser
4.3
CVSSv2
CVE-2016-8508
Yandex Browser for desktop prior to 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.
Yandex Yandex Browser
4.3
CVSSv2
CVE-2020-7369
User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an malicious user to obfuscate the true source of data as presented in the browser. This issue affects the Yandex Browser version 20.8.3 and prior versions,...
Yandex Yandex Browser
1 Article
5
CVSSv2
CVE-2017-7325
Yandex Browser prior to 16.9.0 allows remote malicious users to spoof the address bar via window.open.
Yandex Yandex Browser
4.6
CVSSv2
CVE-2021-25263
Local privilege vulnerability in Yandex Browser for Windows before 21.9.0.390 allows a local, low privileged, malicious user to execute arbitary code with the SYSTEM privileges through manipulating files in directory with insecure permissions during Yandex Browser update process.
Yandex Yandex Browser
4.3
CVSSv2
CVE-2016-8505
XSS in Yandex Browser BookReader in Yandex browser for desktop for versions prior to 16.6. could be used by remote attacker for evaluation arbitrary javascript code.
Yandex Yandex.browser
4.3
CVSSv2
CVE-2020-7363
User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an malicious user to obfuscate the true source of data as presented in the browser. This issue affects UCWeb's UC Browser version 13.0.8 and prior...
Ucweb Uc Browser
1 Article
4.3
CVSSv2
CVE-2020-7371
User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an malicious user to obfuscate the true source of data as presented in the browser. This issue affects the RITS Browser version 3.3.9 and prior versions.
Raiseitsolutions Rits Browser
1 Article
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2