Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how yandex compares to other vendors in security performance

View Risk Score →

Yandex Punto SwitcherPunto Switcher 4.5.0.583 Unquoted Search Path via WinExec

Risk 73
Severity
8.5
First published (updated )
CVE-2026-25865

Yandex Yandex DatabasePrivilege escalation in Yandex Database

Risk 43
Severity
5.3
First published (updated )
CVE-2026-10549

Yandex MessengerDylib Hijacking in Yandex Messenger

Risk 66
Severity
7.3
First published (updated )
CVE-2025-5469

Yandex TelemostDylib Hijacking in Yandex Telemost

Risk 69
Severity
7.8
First published (updated )
CVE-2025-5471

Yandex Yandex DiskDylib Hijacking in Yandex Disk

Risk 66
Severity
7.3
First published (updated )
CVE-2025-5470
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Yandex Yandex.MetricaWordPress Yandex.Metrica plugin <= 1.2.2 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2025-63063

The RegisterMeta pauses mobile port tracking tech on Android after researchers cry foul

First published (updated )
News
The Register

Yandex TelemostDLL Hijacking in Yandex Telemost

Risk 73
Severity
8.4
First published (updated )
CVE-2024-12168

Yandex Browser for DesktopA use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682

Risk 86
Severity
9.8
First published (updated )
CVE-2023-26226

Yandex Yandex Browser for AndroidYandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.

Risk 41
Severity
6.9
First published (updated )
CVE-2021-25262
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Yandex Yandex Browser LiteYandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.

Risk 44
Severity
8.3
First published (updated )
CVE-2021-25255

Yandex Yandex Browser LiteYandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

Risk 46
Severity
8.2
First published (updated )
CVE-2021-25254

Yandex MetrikaDL Yandex Metrika <= 1.2 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-6462

Yandex Yandex BrowserDLL Hijacking in Yandex Browser

Risk 73
Severity
8.4
First published (updated )
CVE-2024-6473

Yandex Turbo FeedMihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2024-4411
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Yandex Market plugin for WordPressYML for Yandex Market <= 4.2.3 - Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2024-1365

Yandex Navigator AndroidAn issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent…

Risk 32
Severity
5.5
First published (updated )
CVE-2023-29751

Yandex Navigator AndroidAn issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation o…

Risk 68
Severity
7.8
First published (updated )
CVE-2023-29749

Yandex Yandex BrowserLocal privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low …

Risk 69
Severity
7.8
First published (updated )
CVE-2022-28225

Yandex Yandex BrowserLocal privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low …

Risk 69
Severity
7.8
First published (updated )
CVE-2022-28226
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Yandex Yandex BrowserLocal privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low …

Risk 69
Severity
7.8
First published (updated )
CVE-2021-25261

Yandex ClickhouseDivide by Zero

Risk 38
Severity
6.5
First published (updated )
CVE-2021-42391

Yandex ClickhouseDivide by Zero

Risk 38
Severity
6.5
First published (updated )
CVE-2021-42390

Yandex ClickhouseDivide by Zero

Risk 38
Severity
6.5
First published (updated )
CVE-2021-42389

debian/clickhouseHeap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As par…

Risk 62
Severity
8.1
First published (updated )
CVE-2021-42388
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

debian/clickhouseHeap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As par…

Risk 62
Severity
8.1
First published (updated )
CVE-2021-42387

debian/clickhouseBuffer Overflow

Risk 82
Severity
8.8
First published (updated )
CVE-2021-43305

debian/clickhouseBuffer Overflow

Risk 79
Severity
8.8
First published (updated )
CVE-2021-43304

Yandex Yandex BrowserYandex Browser before 20.10.0 allows remote attackers to spoof the address bar

Risk 27
Severity
5.3
First published (updated )
CVE-2020-27970

Yandex Yandex Browser AndroidYandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spo…

Risk 52
Severity
7.5
First published (updated )
CVE-2020-27969
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203