Vendor
Yandex
42 known vulnerabilities in products by Yandex, 0 of them actively exploited (CISA KEV).
Key figures
42
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-43305 | Yandex Clickhouse: Heap-based Buffer Overflow | 8.8 | |
| High | CVE-2021-43304 | Yandex Clickhouse: Heap-based Buffer Overflow | 8.8 | |
| High | CVE-2016-10666 | HackerOne tomita-parser node module: Missing Encryption of Sensitive Data | 8.1 | |
| High | CVE-2021-42387 | Yandex Clickhouse: Out-of-bounds Read | 8.1 | |
| High | CVE-2021-42388 | Yandex Clickhouse: Out-of-bounds Read | 8.1 | |
| High | CVE-2017-7327 | Yandex Browser for Desktop: security vulnerability | 7.8 | |
| Medium | CVE-2016-8508 | Yandex Browser for desktop: security vulnerability | 6.5 | |
| Medium | CVE-2016-8507 | Yandex Browser for iOS: security vulnerability | 6.5 | |
| High | CVE-2021-25255 | Yandex Browser Lite: Improper Input Validation | 7.5 | |
| Medium | CVE-2020-27970 | Yandex Browser Lite for Android: security vulnerability | 5.3 | |
| Medium | CVE-2021-42391 | Yandex Clickhouse: Divide By Zero | 6.5 | |
| Medium | CVE-2021-42390 | Yandex Clickhouse: Divide By Zero | 6.5 | |
| Medium | CVE-2021-42389 | Yandex Clickhouse: Divide By Zero | 6.5 | |
| High | CVE-2024-6473 | DLL Hijacking in Yandex Browser | 7.8 | |
| High | CVE-2017-7325 | Yandex Browser: security vulnerability | 7.5 | |
| High | CVE-2016-8503 | Yandex Browser for desktop: security vulnerability | 7.3 | |
| High | CVE-2016-8502 | Yandex Browser for desktop: security vulnerability | 7.3 | |
| High | CVE-2021-25254 | Yandex Browser Lite: Improper Encoding or Escaping of Output | 5.3 | |
| Critical | CVE-2023-26226 | Yandex Browser: Use After Free | 9.8 | |
| Medium | CVE-2016-8501 | Yandex Browser for desktop Versions from 15.10 to 15.12: security vulnerability | 5.3 | |
| High | CVE-2017-7326 | Yandex Browser for Android: Memory Corruption | 7.5 | |
| High | CVE-2026-25865 | Punto Switcher 4.5.0.583 Unquoted Search Path via WinExec | 7.8 | |
| Medium | CVE-2016-8505 | Yandex Browser for desktop: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2016-8506 | Yandex Browser for desktop: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2021-25262 | Yandex Browser: Improper Encoding or Escaping of Output | 5.4 |
Products
| Yandex Browser | 24 | 0 |
| Clickhouse | 7 | 0 |
| Yandex Browser | 3 | 0 |