← Back

Yandex

yandex

31 CVEs • 8 products

Products (8)

Click to collapse
Toggle
Yandex Browser
yandex_browser
22 CVEs
Navigator
navigator
2 CVEs
Yandex Telemost
yandex_telemost
2 CVEs
Yandex.server
yandex.server
1 CVE
Yandex.server 2010
yandex.server_2010
1 CVE
Yandex.browser
yandex.browser
1 CVE
Tomita Parser
tomita-parser
1 CVE
Yandex Turbo
yandex_turbo
1 CVE

CVEs (31)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-7325
1Yandex
1Yandex Browser
Nov 21, 2024
Jan 19, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.
CVE-2016-8508
1Yandex
1Yandex Browser
May 13, 2026
Mar 1, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warn...Show more
Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.Show less
CVE-2016-8507
1Yandex
1Yandex Browser
May 13, 2026
Mar 1, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a...Show more
Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site.Show less
CVE-2016-8506
1Yandex
1Yandex Browser
May 6, 2026
Oct 26, 2016
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javascript code.
CVE-2016-8505
1Yandex
1Yandex.browser
May 6, 2026
Oct 26, 2016
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.
CVE-2016-8504
1Yandex
1Yandex Browser
May 6, 2026
Oct 26, 2016
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.
CVE-2016-8503
1Yandex
1Yandex Browser
May 6, 2026
Oct 26, 2016
N/A· v4
7.3 HIGH· v3
5.0 MEDIUM· v2
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.
CVE-2016-8502
1Yandex
1Yandex Browser
May 6, 2026
Oct 26, 2016
N/A· v4
7.3 HIGH· v3
5.0 MEDIUM· v2
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.
CVE-2016-8501
1Yandex
1Yandex Browser
May 6, 2026
Oct 26, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Security WiFi bypass in Yandex Browser from version 15.10 to 15.12 allows remote attacker to sniff traffic in open or WEP-protected wi-fi networks despite of special security mechanism is enabled.
CVE-2012-2941
1Yandex
1Yandex.server 2010
Apr 29, 2026
May 27, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter.
CVE-2007-3485
1Yandex
1Yandex.server
Apr 23, 2026
Jun 28, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) within parameter to the default URI.