CVE-2021-25262: Improper Encoding or Escaping of Output

Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack...

PT-2021-7164

Name of the Vulnerable Software and Affected Versions Yandex Browser for Android version 20.8.4 Description The issue is related to shortcomings in the data source confirmation mechanism, allowing remote attackers to bypass the Same-Origin Policy SOP and spoof the address bar. This can enable a...

CVE-2020-27969: Origin Validation Error

Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing...

CVE-2017-7326: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page...

PT-2018-3795

Name of the Vulnerable Software and Affected Versions Yandex Browser for Android versions prior to 17.4.0.16 Description The issue is related to a race condition that can lead to memory corruption. A remote attacker could potentially exploit this by using a crafted HTML page. The vulnerability is...