CVE-2017-7327: Yandex Browser

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll.

Affected products

• Yandex Yandex Browser: up to and including 17.4.0.16

Published 2018-01-19. Last modified 2026-06-17.