Privilege escalation

2022-06-1520:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process.

CPENameOperatorVersion
yandex_browserlt22.3.3.684

CPE	Name	Operator	Version
	yandex_browser	lt	22.3.3.684

References

yandex.com/bugbounty/i/hall-of-fame-browser/