Yandex vulnerabilities
We track 3 vulnerabilities in Yandex products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 18, 2026.
Latest Yandex vulnerabilities
- 7.8 High severity
Punto Switcher: Unquoted Search Path or Element
Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the application's call to WinExec without a fully qualified path for RunDll32.exe when invoking shell32.
- 7.8 High severity
Yandex Browser (Desktop): Exposure of Resource to Wrong Sphere
Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating temporary files in directory with insecure permissions during Yand
- 7.8 High severity
Yandex Browser (Desktop): Improper Link Resolution Before File Access
Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process