Exploit for Untrusted Search Path in Yandex Yandex_Browser

CVE-2024-6473 PoC Yandex Browser for Desktop before 24.7...

CVE-2024-6473

creationtimestamp| type| source ---|---|--- 2024-09-03 14:07:48+00:00| seen| https://t.me/cvedetector/4678 2024-11-02 08:05:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8925 2024-11-02 16:19:42+00:00| published-proof-of-concept| https://t.me/CNArsenal/3386 2024-11-02...

CVE-2024-6473

Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used...

CVE-2024-6473

CVE-2024-6473 details (MODE C): Yandex Browser for Desktop is affected on versions before 24.7.1.380 due to a DLL hijacking vulnerability caused by an untrusted search path. A PoC demonstrates DLL loading from a crafted path, validating the vulnerability exists in the cited build. The PoC targets...

CVE-2024-6473 DLL Hijacking in Yandex Browser

Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used...