https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5471.htmlhttps://patchthecve.com/cve/CVE-2025-5471.htmlWed, 07 Oct 2026 20:10:01 +0000HIGH 7.8: Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1.https://patchthecve.com/cve/CVE-2024-12168.htmlhttps://patchthecve.com/cve/CVE-2024-12168.htmlWed, 17 Jun 2026 06:59:10 +0000HIGH 7.8: Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used.https://patchthecve.com/cve/CVE-2023-26226.htmlhttps://patchthecve.com/cve/CVE-2023-26226.htmlWed, 17 Jun 2026 05:42:51 +0000CRITICAL 9.8: A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682https://patchthecve.com/cve/CVE-2021-25262.htmlhttps://patchthecve.com/cve/CVE-2021-25262.htmlWed, 17 Jun 2026 03:41:43 +0000MEDIUM 5.4: Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.https://patchthecve.com/cve/CVE-2021-25255.htmlhttps://patchthecve.com/cve/CVE-2021-25255.htmlWed, 17 Jun 2026 03:41:43 +0000HIGH 7.5: Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.https://patchthecve.com/cve/CVE-2021-25254.htmlhttps://patchthecve.com/cve/CVE-2021-25254.htmlWed, 17 Jun 2026 03:41:43 +0000MEDIUM 5.3: Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.https://patchthecve.com/cve/CVE-2024-6473.htmlhttps://patchthecve.com/cve/CVE-2024-6473.htmlWed, 17 Jun 2026 08:18:05 +0000HIGH 7.8: Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used.