CVE-2022-28226

🗓️ 15 Jun 2022 19:06:17Reported by yandexType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 70 Views

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating temporary files in directory with insecure permissions during Yandex Browser update process

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-28226	15 Jun 202220:15	–	attackerkb
BDU FSTEC	The vulnerability of the Yandex Browser, related to errors in processing temporary files, allows attackers to escalate their privileges.	21 Jun 202200:00	–	bdu_fstec
CNNVD	Yandex Browser 安全漏洞	15 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-28226	15 Jun 202219:06	–	cvelist
EUVD	EUVD-2022-32678	3 Oct 202520:07	–	euvd
NVD	CVE-2022-28226	15 Jun 202220:15	–	nvd
OSV	CVE-2022-28226	15 Jun 202220:15	–	osv
Prion	Privilege escalation	15 Jun 202220:15	–	prion
Positive Technologies	PT-2022-2932 · Yandex · Yandex Browser	30 Mar 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-28226	23 May 202501:05	–	redhatcve

NVD

Node

yandex yandex_browserRange<22.3.3.801

AND

microsoft windowsMatch-

[
  {
    "product": "Yandex Browser (Desktop)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 22.3.3.801"
      }
    ]
  }
]