Yandex Browser 15.2.2214.3645

CPE Details

Yandex Browser 15.2.2214.3645
yandex
yandex_browser
15.2.2214.3645
2019-11-21
14h18 +00:00
2019-11-21
14h18 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:yandex:yandex_browser:15.2.2214.3645:*:*:*:*:*:*:*

Informations

Vendor

yandex

Product

yandex_browser

Version

15.2.2214.3645

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-6473 2024-09-03 10h35 +00:00 Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used.
8.4
Haute
CVE-2022-28225 2022-06-15 17h10 +00:00 Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process.
7.8
Haute
CVE-2022-28226 2022-06-15 17h06 +00:00 Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating temporary files in directory with insecure permissions during Yandex Browser update process.
7.8
Haute
CVE-2021-25261 2022-06-15 17h05 +00:00 Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process.
7.8
Haute
CVE-2020-27970 2021-09-13 09h46 +00:00 Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar
5.3
Moyen
CVE-2017-7325 2018-01-19 17h00 +00:00 Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.
7.5
Haute
CVE-2017-7327 2018-01-19 17h00 +00:00 Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll.
7.8
Haute
CVE-2016-8508 2017-03-01 14h00 +00:00 Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.
6.5
Moyen
CVE-2016-8504 2016-10-26 16h00 +00:00 CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.
4.3
Moyen
CVE-2016-8506 2016-10-26 16h00 +00:00 XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javascript code.
6.1
Moyen