Vendor
yandex
Public exploit1Avg CVSS7.2
CVEs in the catalog
19
since 2020-10
Months in the top 100
1
months with a stored rank
Best rank
#26
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| clickhouse | 7 | 37% |
| browser | 3 | 16% |
| browser lite | 2 | 11% |
| telemost | 2 | 11% |
| yandex browser | 2 | 11% |
| disk | 1 | 5% |
| messenger | 1 | 5% |
| punto switcher | 1 | 5% |
| yandex database | 1 | 5% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-369 | 3 | 16% |
| CWE-427 | 3 | 16% |
| CWE-116 | 2 | 11% |
| CWE-122 | 2 | 11% |
| CWE-125 | 2 | 11% |
| CWE-426 | 2 | 11% |
| CWE-20 | 1 | 5% |
| CWE-280 | 1 | 5% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-25865 | CWE-428 | none yet | 7.8 | 2026-06-18 |
| CVE-2026-10549 | CWE-280 | none yet | 5.3 | 2026-06-02 |
| CVE-2025-5469 | CWE-427 | none yet | 7.3 | 2025-12-09 |
| CVE-2025-5471 | CWE-427 | none yet | 7.3 | 2025-12-09 |
| CVE-2025-5470 | CWE-427 | none yet | 7.3 | 2025-12-09 |
| CVE-2024-12168 | CWE-426 | none yet | 8.4 | 2025-06-02 |
| CVE-2023-26226 | CWE-416 | none yet | 7.4 | 2025-05-30 |
| CVE-2021-25262 | CWE-116 | none yet | 6.9 | 2025-05-21 |
| CVE-2021-25255 | CWE-20 | none yet | 8.3 | 2025-05-21 |
| CVE-2021-25254 | CWE-116 | none yet | 8.2 | 2025-05-21 |
| CVE-2024-6473 | CWE-426 | 1 | 8.4 | 2024-09-03 |
| CVE-2021-42391 | CWE-369 | none yet | n/a | 2022-03-14 |
| CVE-2021-42390 | CWE-369 | none yet | n/a | 2022-03-14 |
| CVE-2021-42389 | CWE-369 | none yet | n/a | 2022-03-14 |
| CVE-2021-43305 | CWE-122 | none yet | n/a | 2022-03-14 |