← Database

CVE-2022-28225

HIGH CVSS: 7.8 Published: 2022-06-15 Modified: 2026-06-17

Description

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process.

Affected Platforms

Microsoft WindowsYandex Yandex Browser

Weakness Type

CWE-59

References