CVE-2022-28225

Published: Jun 15, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process.

Vendor	Product	Versions
n/a	Yandex Browser (Desktop)	affected `All versions prior to version 22.3.3.684`

References

https://yandex.com/bugbounty/i/hall-of-fame-browser/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-28225

Description

Affected Products

References