CVE-2024-12168

High CVSS: 8.4

Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used.

Vendor

Product

CWE

Yayın Tarihi

2025-06-02 13:15:20

Güncelleme

2025-12-03 21:16:37

Source Identifier

browser-security@yandex-team.ru

KEV Date Added

CWE-426 Yandex Telemost HIGH Yandex 2025

https://yandex.com/bugbounty/i/hall-of-fame-products

High

CVE-2025-5471

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affe…

High

CVE-2023-26226

A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682

High

CVE-2021-25255

Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.

Medium

CVE-2021-25262

Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.

High

CVE-2021-25254

Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.