PatchTheCVEyandex browser vulnerabilities and fixes
Recent CVEs affecting yandex browser, with upgrade or downgrade steps. 5 tracked.
Also searched as: yandexbrowser.
yandex browser has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-05-30. Highest priority: CVE-2023-26226 (score 47/100).
- CVE-2024-6473 HIGH 7.8 UPGRADE Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search pat
- CVE-2023-26226 CRITICAL 9.8 UPGRADE A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682
- CVE-2021-25262 MEDIUM 5.4 UPGRADE Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.
- CVE-2021-25255 HIGH 7.5 UPGRADE Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.
- CVE-2021-25254 MEDIUM 5.3 UPGRADE Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.
FAQ
How do I fix yandex browser vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yandex browser being exploited right now?
None of the tracked yandex browser CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yandex browser CVE should I patch first?
CVE-2023-26226 currently ranks highest (47/100): A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682.