CVE-2023-26226CWE-416

A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682

High · published May 30, 2025

CVSS v4.0
7.4
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

⚡ A use-after-free vulnerability lurks in Yandex Browser for Desktop, allowing mischief to occur if the wrong memory is accessed! Think of it like a restaurant that keeps serving dishes that have been thrown away — the leftover food can cause a stomach ache! Just like that, accessing freed-up memory can lead to unpredictable and potentially harmful behavior in your browser. An attacker could exploit this flaw to corrupt memory, causing crashes, or even run malicious code if they can control the freed memory. This could mean loss of data or unexpected behavior while browsing — definitely not the kind of surprise you want!

Put simply

Think of it like a restaurant that keeps serving dishes that have been thrown away — the leftover food can cause a stomach ache! Just like that, accessing freed-up memory can lead to unpredictable and potentially harmful behavior in your browser. The use-after-free vulnerability in Yandex Browser means that once a memory space is freed up, it can still be accessed, leading to potential corruption and security concerns. This flaw exists in versions prior to 24.4.0.682.

What to do

An attacker could exploit this flaw to corrupt memory, causing crashes, or even run malicious code if they can control the freed memory. This could mean loss of data or unexpected behavior while browsing — definitely not the kind of surprise you want! To protect yourself, update Yandex Browser to version 24.4.0.682 or later immediately. Regularly check for updates to ensure you're always running the latest version. 🛡️ You’ve got this! With a quick update, your browsing will be safer in no time! 🚀

The record
Technical detail
CVSS v4.0
7.4 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H
EPSS
0.00371 · 29.8th percentile
Weakness
CWE-416 · Use After Free
Published
2025-05-30T17:23Z
EPSS history
Timeline
  • 30 MAY 17:23Z
    A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682
    cvelistv5