Yandex vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20227
3. 20241
4. 20258
5. 20262

Newest CVEs

• CVE-2026-25865

  Punto Switcher 4.5.0.583 Unquoted Search Path via WinExec

  Yandex · Punto Switcher

  High8.5
• CVE-2026-10549

  Privilege escalation in Yandex Database

  Yandex · Yandex Database

  Medium5.3
• CVE-2025-5469

  Dylib Hijacking in Yandex Messenger

  Yandex · Messenger

  High7.3
• CVE-2025-5471

  Dylib Hijacking in Yandex Telemost

  Yandex · Telemost

  High7.3
• CVE-2025-5470

  Dylib Hijacking in Yandex Disk

  Yandex · Disk

  High7.3
• CVE-2024-12168

  DLL Hijacking in Yandex Telemost

  Yandex · Telemost

  High8.4
• CVE-2023-26226

  A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682

  Yandex · Browser

  High7.4
• CVE-2021-25262

  Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.

  Yandex · Browser

  Medium6.9
• CVE-2021-25255

  Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.

  Yandex · Browser Lite

  High8.3
• CVE-2021-25254

  Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

  Yandex · Browser Lite

  High8.2