CVE-2022-28226

🗓️ 15 Jun 2022 19:06:17Reported by yandexType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 125 Views

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating temporary files in directory with insecure permissions during Yandex Browser update process

Reporter	Title	Published	Views	Family All 11
attackerkb	CVE-2022-28226	15 Jun 202220:15	–	attackerkb
BDU FSTEC	Yandex Privilege Escalation	21 Jun 202200:00	–	bdu_fstec
CNNVD	Yandex Browser security vulnerabilities	15 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-28226	15 Jun 202219:06	–	cvelist
EUVD	EUVD-2022-32678	3 Oct 202520:07	–	euvd
NVD	CVE-2022-28226	15 Jun 202220:15	–	nvd
osv_cve	CVE-2022-28226	15 Jun 202220:15	–	osv_cve
Prion	Privilege escalation	15 Jun 202220:15	–	prion
Positive Technologies	PT-2022-2932 · Yandex · Yandex Browser	30 Mar 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-28226: Exposure of Resource to Wrong Sphere	15 Jun 202200:00	–	rapid7

NVD

Node

AND

yandex yandex_browserRange<22.3.3.801

microsoft windowsMatch-

[
  {
    "product": "Yandex Browser (Desktop)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 22.3.3.801"
      }
    ]
  }
]