CVE-2021-25263

Local privilege vulnerability in Yandex Browser for Windows prior to
21.9.0.390 allows a local, low privileged, attacker to execute arbitary
code with the SYSTEM privileges through manipulating files in directory
with insecure permissions during Yandex Browser update process.