Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

42 records

Vendor: Yandex Clear all filters
TI-2026-20907 CVE-2026-25865 · GHSA-w78p-vwm4-m8q9

Punto Switcher 4.5.0.583 Unquoted Search Path via WinExec

Priority LOW 38

Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the application's call to WinExec without a fully qualified path…

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00198 Published 2026-06-18 No fix listed CWE-428
TI-2026-09074 CVE-2026-10549 · GHSA-4x3h-p6xh-h5x5

Privilege escalation in Yandex Database

Priority LOW 24

LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauthorized access to the database.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00268 Published 2026-06-02 Fixed in 25.3.1.25 CWE-280
TI-2025-04910 CVE-2025-5469 · GHSA-p92j-vq8q-93gg

Dylib Hijacking in Yandex Messenger

Priority LOW 33

Uncontrolled Search Path Element vulnerability in Yandex Messenger on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.245

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.0017 Published 2025-12-09 Fixed in 2.245 CWE-427
TI-2025-04912 CVE-2025-5471 · GHSA-2v48-hmwv-qpj8

Dylib Hijacking in Yandex Telemost

Priority LOW 33

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00179 Published 2025-12-09 Fixed in 2.19.1 CWE-427
TI-2025-04911 CVE-2025-5470 · GHSA-fq75-2p32-52hm

Dylib Hijacking in Yandex Disk

Priority LOW 33

Uncontrolled Search Path Element vulnerability in Yandex Disk on MacOS allows Search Order Hijacking.This issue affects Disk: before 3.2.45.3275.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00175 Published 2025-12-09 Fixed in 3.2.45.3275 CWE-427
TI-2024-11283 CVE-2024-12168 · GHSA-f6vc-7qmx-ffw4

DLL Hijacking in Yandex Telemost

Priority LOW 36

Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00163 Published 2025-06-02 Fixed in 2.7.0 CWE-426
TI-2024-06006 CVE-2024-6473 · GHSA-p7m8-prjf-m93h

DLL Hijacking in Yandex Browser

Priority MEDIUM 40

Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.0071 Published 2024-09-03 Fixed in 24.7.1.380 CWE-426
TI-2022-11011 CVE-2022-28225 · GHSA-9vv8-3g89-c4p4

Link following in Yandex Browser

Priority LOW 35

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation f…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00474 Published 2022-06-15 No fix listed CWE-59
TI-2022-11012 CVE-2022-28226 · GHSA-j323-vp27-mqgh

Exposure of resource to wrong sphere in Yandex Browser

Priority LOW 34

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating temporary files in directo…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00379 Published 2022-06-15 No fix listed CWE-668
TI-2021-07513 CVE-2021-25261 · GHSA-p6r9-h8xg-qhvr

Link following in Yandex Browser

Priority LOW 35

Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation f…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00474 Published 2022-06-15 No fix listed CWE-59
TI-2021-19298 CVE-2021-43305 · GHSA-rjm8-hjq2-73j6

Heap-based buffer overflow in Yandex clickhouse

Priority MEDIUM 41

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01672 Published 2022-03-14 Fixed in 21.10.2.15-stable CWE-122
TI-2021-19297 CVE-2021-43304 · GHSA-4px5-4p3v-7568

Heap-based buffer overflow in Yandex clickhouse

Priority MEDIUM 41

Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01672 Published 2022-03-14 Fixed in 21.10.2.15-stable CWE-122
TI-2021-18802 CVE-2021-42388 · GHSA-gg7g-5hm7-ggx5

Out-of-bounds read in Yandex clickhouse

Priority LOW 38

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01573 Published 2022-03-14 Fixed in 21.10.2.15-stable CWE-125
TI-2021-18801 CVE-2021-42387 · GHSA-cf9g-639p-3wvv

Out-of-bounds read in Yandex clickhouse

Priority LOW 38

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01573 Published 2022-03-14 Fixed in 21.10.2.15-stable CWE-125
Load more