Yandex vulnerabilities
41 vulnerabilities
Known vulnerabilities in Yandex products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 16 products.
Products
16- Yandex Browser22 vulnerabilities
- Clickhouse7 vulnerabilities
- Browser3 vulnerabilities
- Browser Lite2 vulnerabilities
- Navigator2 vulnerabilities
- Telemost2 vulnerabilities
- Yandex Telemost2 vulnerabilities
- Disk1 vulnerabilities
- Messenger1 vulnerabilities
- Punto Switcher1 vulnerabilities
- Tomita Parser1 vulnerabilities
- Yandex Database1 vulnerabilities
- Yandex Turbo1 vulnerabilities
- Yandex.Browser1 vulnerabilities
- Yandex.Server 20101 vulnerabilities
- Yandex.Server0 vulnerabilities
MediumCVE-2021-42389clickhouse +1 moreclickhouse clickhouseDivide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.EPSS1.26%MediumCVE-2021-42390clickhouse +1 moreclickhouse clickhouseDivide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.EPSS1.26%HighCVE-2021-42388clickhouse +4 moreclickhouse clickhouseHeap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the lower bounds of the source of the copy operation.EPSS1.57%MediumCVE-2021-42391clickhouse +1 moreclickhouse clickhouseDivide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0.EPSS1.37%HighCVE-2021-42387clickhouse +4 moreclickhouse clickhouseHeap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation.EPSS1.57%HighCVE-2021-25263yandex · yandex_browseryandex yandex_browserLocal privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating files in directory with insecure permissions during Yandex Browser update process.EPSS0.41%HighCVE-2021-25254yandex · browser lite +1 moreYandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.EPSS0.56%HighCVE-2021-25261yandex · yandex_browseryandex yandex_browserLocal privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process.EPSS0.47%MediumCVE-2021-25262yandex · browser +1 moreYandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.EPSS0.46%HighCVE-2021-25255yandex · browser lite +1 moreYandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.EPSS0.82%HighCVE-2021-43304clickhouse +3 moreclickhouse clickhouseHeap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits.EPSS1.67%HighCVE-2021-43305clickhouse +4 moreclickhouse clickhouseHeap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decompressImpl loop and especially the arbitrary copy operation wildCopy<copy_amount>(op, ip, copy_end), don’t exceed the destination buffer’s limits. This issue is very similar to CVE-2021-43304, but the vulnerable copy operation is in a different wildCopy call.EPSS1.67%MediumCVE-2021-24428unknown · rss for yandex turbo +2 moreRSS for Yandex Turbo <= 1.30 - Authenticated Stored XSSThe RSS for Yandex Turbo WordPress plugin through 1.30 does not sanitise or escape some of its settings before saving and outputing them in the admin dashboard, leading to an Authenticated Stored Cross-Site Scripting issue even when the unfiltered_html capability is disallowed.EPSS0.55%CriticalCVE-2016-10666hackerone · tomita-parser node module +2 morehackerone tomita-parser node moduletomita-parser is a Node wrapper for Yandex Tomita Parser tomita-parser downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.EPSS1.66%MediumCVE-2016-8507yandex n.v. · yandex browser for ios +1 moreyandex n.v. yandex browser for iosYandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site.EPSS1.52%HighCVE-2016-8503yandex n.v. · yandex browser for desktop +1 moreyandex n.v. yandex browser for desktopYandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.EPSS1.00%MediumCVE-2016-8505yandex n.v. · yandex browser for desktop +1 moreyandex n.v. yandex browser for desktopXSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.EPSS0.85%MediumCVE-2016-8506yandex n.v. · yandex browser for desktop +1 moreyandex n.v. yandex browser for desktopXSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javascript code.EPSS0.85%HighCVE-2016-8502yandex n.v. · yandex browser for desktop +1 moreyandex n.v. yandex browser for desktopYandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.EPSS1.00%MediumCVE-2016-8504yandex n.v. · yandex browser for desktop +1 moreyandex n.v. yandex browser for desktopCSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.EPSS0.56%