CVE-2022-28225

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process...

CVE-2022-28225

The CVE-2022-28225 entry concerns Yandex Browser for Windows before version 22.3.3.684, where a local, low-privilege attacker can gain SYSTEM-level arbitrary code execution by manipulating symlinks to the installation file during the update process. Affected software is Yandex Browser for Windows...