CVE-2025-5469CWE-427

CVE-2025-5469

published December 9, 2025

CVSS
7.3
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

Uncontrolled Search Path Element vulnerability in Yandex Messenger on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.245

The record
Technical detail
CVSS
7.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.0th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-12-09T21:17Z
References (1)
https://yandex.com/bugbounty/i/hall-of-fame-products · [email protected]
EPSS history
Timeline
  • 09 DEC 15:55Z
    Dylib Hijacking in Yandex Messenger
    cvelistv5