PatchTheCVEyandex vulnerabilities
Recent CVEs affecting yandex products. 7 tracked.
yandex has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-12-09. Highest priority: CVE-2023-26226 (score 47/100).
- CVE-2025-5471 HIGH 7.8 UPGRADE Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This
- CVE-2024-6473 HIGH 7.8 UPGRADE Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search pat
- CVE-2024-12168 HIGH 7.8 DOWNGRADE Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is
- CVE-2023-26226 CRITICAL 9.8 UPGRADE A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682
- CVE-2021-25262 MEDIUM 5.4 UPGRADE Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.
- CVE-2021-25255 HIGH 7.5 UPGRADE Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.
- CVE-2021-25254 MEDIUM 5.3 UPGRADE Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.
FAQ
How do I fix yandex vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yandex being exploited right now?
None of the tracked yandex CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yandex CVE should I patch first?
CVE-2023-26226 currently ranks highest (47/100): A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682.