vciy

CVEs we hold for Yandex

Records whose assigning authority named Yandex as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-25865Punto Switcher 4.5.0.583 Unquoted Search Path via WinExecYandex Punto Switcher
CVE-2026-10549Privilege escalation in Yandex DatabaseYandex Database
CVE-2025-63063WordPress Yandex.Metrica plugin <= 1.2.2 - Broken Access Control vulnerabilityYandex Metrika Yandex.Metrica
CVE-2025-5471Dylib Hijacking in Yandex TelemostYandex Telemost
CVE-2025-5470Dylib Hijacking in Yandex DiskYandex Disk
CVE-2025-5469Dylib Hijacking in Yandex MessengerYandex Messenger
CVE-2024-6473DLL Hijacking in Yandex BrowserYandex Browser
CVE-2024-12168DLL Hijacking in Yandex TelemostYandex Telemost
CVE-2023-26226A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682Yandex Browser
CVE-2022-28226no title heldn/a Yandex Browser (Desktop)
CVE-2022-28225no title heldn/a Yandex Browser (Desktop)
CVE-2021-43305no title heldyandex clickhouse
CVE-2021-43304no title heldyandex clickhouse
CVE-2021-42391no title heldyandex clickhouse
CVE-2021-42390no title heldyandex clickhouse
CVE-2021-42389no title heldyandex clickhouse
CVE-2021-42388no title heldyandex clickhouse
CVE-2021-42387no title heldyandex clickhouse
CVE-2021-25263no title heldn/a Yandex Browser (Desktop)
CVE-2021-25262Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.Yandex Browser
CVE-2021-25261no title heldn/a Yandex Browser (Desktop)
CVE-2021-25255Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.Yandex Browser Lite
CVE-2021-25254Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.Yandex Browser Lite
CVE-2020-7369Yandex Browser Address Bar SpooofingYandex Browser
CVE-2020-27970no title heldn/a Yandex Browser Lite for Android
CVE-2020-27969no title heldn/a Yandex Browser for Android
CVE-2017-7327no title heldYandex Browser for Desktop
CVE-2017-7326no title heldYandex Browser for Android
CVE-2017-7325no title heldYandex Browser
CVE-2016-8508no title heldYandex Browser for desktop
CVE-2016-8507no title heldYandex Browser for iOS
CVE-2016-8506no title heldYandex Browser for desktop
CVE-2016-8505no title heldYandex Browser for desktop
CVE-2016-8504no title heldYandex Browser for desktop
CVE-2016-8503no title heldYandex Browser for desktop
CVE-2016-8502no title heldYandex Browser for desktop
CVE-2016-8501no title heldn/a Yandex Browser for desktop Versions from 15.10 to 15.12

37 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.