CVE-2025-5470CWE-427

CVE-2025-5470

published December 9, 2025

CVSS
7.3
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

Uncontrolled Search Path Element vulnerability in Yandex Disk on MacOS allows Search Order Hijacking.This issue affects Disk: before 3.2.45.3275.

The record
Technical detail
CVSS
7.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.7th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-12-09T21:17Z
References (1)
https://yandex.com/bugbounty/i/hall-of-fame-products · [email protected]
EPSS history
Timeline
  • 09 DEC 15:50Z
    Dylib Hijacking in Yandex Disk
    cvelistv5