How many Yandex Browser CVEs are in CISA KEV?

None of Yandex Browser's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Yandex Browser vulnerabilities?

Yes — 1 of Yandex Browser's CVEs have a known public exploit.

Which versions of Yandex Browser are affected?

5 distinct Yandex Browser versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Yandex Browser CVEs?

Yandex Browser's CVEs most often map to these CWE weakness types: CWE-116 (Improper Encoding or Escaping of Output), CWE-416 (Use After Free), CWE-426 (Untrusted Search Path).

What is the average severity of Yandex Browser CVEs?

The average CVSS base score across Yandex Browser's scored CVEs is 7.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Yandex

3 CVEs

Yandex Browser Vulnerabilities

Name: Yandex Browser vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Browser by Yandex.

3

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.6

Avg CVSS

2024–2025

Last updated May 30, 2025

Overview

Yandex Browser has 3 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Yandex Browser, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include android, macos, windows.

Severity and exploitation

How the CVSS severity of Yandex Browser's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Yandex Browser's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Yandex Browser's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Yandex Browser version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 24.4.0.6821 CVE
< 24.7.1.3801 CVE
>= 21.3.01 CVE

Fixed in

24.4.0.6821 CVE
24.7.1.3801 CVE

Find a version

3 CVEs

Sort

A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682
CVE-2023-26226
Patch
CWE-416
High · CVSS 7.4
EPSS 0.3% (24th pct)2025-05-30
Medium vulnerability · 2025-05-21
CVE-2021-25262
Patch
CWE-116
Medium · CVSS 6.9
EPSS 0.4% (30th pct)2025-05-21
High vulnerability · 2024-09-03
CVE-2024-6473
Public exploit
Patch
CWE-426
High · CVSS 8.4
EPSS 0.7% (50th pct)2024-09-03

Common weakness types

The CWE weakness categories most often found in Yandex Browser CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Yandex Browser CVEs were published each year.

2024

1

2025

2

Other Yandex products

Browse vulnerabilities for other products by Yandex.

yandex browser22 CVEs clickhouse7 CVEs Yandex Browser for desktop7 CVEs Browser Lite2 CVEs navigator2 CVEs Telemost2 CVEs yandex telemost2 CVEs Disk1 CVEs

All Yandex vulnerabilities

Frequently asked questions

Common questions about Yandex Browser vulnerabilities.

How many CVEs does Yandex Browser have?: Yandex Browser has 3 published CVE records since 2024.
How many Yandex Browser CVEs are in CISA KEV?: None of Yandex Browser's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Yandex Browser vulnerabilities?: Yes — 1 of Yandex Browser's CVEs have a known public exploit.
Which versions of Yandex Browser are affected?: 5 distinct Yandex Browser versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Yandex Browser CVEs?: Yandex Browser's CVEs most often map to these CWE weakness types: CWE-116 (Improper Encoding or Escaping of Output), CWE-416 (Use After Free), CWE-426 (Untrusted Search Path).
What is the average severity of Yandex Browser CVEs?: The average CVSS base score across Yandex Browser's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Yandex Browser vulnerabilities

Monitor new Yandex Browser vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing