CVE-2022-28225

HIGH 7.8CVE-2022-28225 · Published 15/06/2022 · updated 17/06/2026

In short

CVE-2022-28225 is a HIGH (CVSS 7.8) vulnerability affecting yandex browser (yandex).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.4% of all vulnerabilities.
Fix: update to 22.3.3.684 or later.

Package	Affected versions	Patched versions
yandex browser yandex	`< 22.3.3.684`	`22.3.3.684`

Description

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process.

References

yandex.com/bugbounty/i/hall-of-fame-browser · Vendor Advisory

More vulnerabilities in yandex browser

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free