CVE-2017-7327

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-19 · updated 2026-06-17
Weakness: CWE-426

Description

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll.

Affected products

Yandex N.V. Yandex Browser for desktop: through 17.4.0.16

References

https://browser.yandex.com/security/changelogs/fixed-in-version-17-4
https://browser.yandex.com/security/changelogs/fixed-in-version-17-4

Get alerted when CVE-2017-7327 or the next vulnerability affects your stack