| Max CVSS | 6.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-7325 | 5.0 |
Yandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.
|
05-02-2018 - 15:31 | 19-01-2018 - 17:29 | |
| CVE-2017-7327 | 6.8 |
Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll.
|
01-02-2018 - 21:15 | 19-01-2018 - 17:29 | |
| CVE-2017-7326 | 5.1 |
Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page
|
01-02-2018 - 21:14 | 19-01-2018 - 17:29 | |
| CVE-2016-8503 | 5.0 |
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.
|
02-12-2016 - 23:59 | 26-10-2016 - 18:59 | |
| CVE-2016-8502 | 5.0 |
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.
|
02-12-2016 - 23:55 | 26-10-2016 - 18:59 | |
| CVE-2016-8501 | 5.0 |
Security WiFi bypass in Yandex Browser from version 15.10 to 15.12 allows remote attacker to sniff traffic in open or WEP-protected wi-fi networks despite of special security mechanism is enabled.
|
02-12-2016 - 23:53 | 26-10-2016 - 18:59 | |
| CVE-2016-8504 | 4.3 |
CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.
|
02-12-2016 - 23:51 | 26-10-2016 - 18:59 | |
| CVE-2016-8505 | 4.3 |
XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.
|
02-12-2016 - 23:48 | 26-10-2016 - 18:59 | |
| CVE-2016-8506 | 4.3 |
XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javascript code.
|
02-12-2016 - 23:48 | 26-10-2016 - 18:59 |