Yandex Browser (< 24.7.1.380) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/yandex-browser--24.7.1.380/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 13:35:28 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgYandex Browser: DLL hijacking vulnerability (CVE-2024-6473)https://feed.craftedsignal.io/briefs/2026-11-cve-2024-6473-yandex/Mon, 09 Nov 2026 13:35:28 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cve-2024-6473-yandex/CVE-2024-6473 is a DLL hijacking vulnerability in Yandex Browser for Desktop versions prior to 24.7.1.380, allowing local code execution via an untrusted search path.Yandex Browser for Desktop versions prior to 24.7.1.380 are vulnerable to DLL hijacking. The application uses an untrusted search path that allows a local attacker to place a malicious DLL within the installation directory. When the browser starts, it loads the malicious library, resulting in local code execution. A functional proof-of-concept has been published, utilizing a ProxyDll-based approach.

Impact

Successful exploitation allows a local attacker to execute arbitrary code with the permissions of the user running the Yandex Browser process.

Recommendation

  • Upgrade Yandex Browser to version 24.7.1.380 or later to remediate the vulnerable search path.
  • Implement monitoring for the creation of new DLL files within the %LOCALAPPDATA%\Yandex\YandexBrowser\Application directory.
  • Audit the application directory for non-standard DLLs or files with suspicious naming patterns.
]]>highadvisory