Local Privilege Escalation in Yandex Browser for Windows

CVE-2021-25263

What is CVE-2021-25263?

A local privilege escalation vulnerability exists in Yandex Browser for Windows, specifically in versions prior to 21.9.0.390. This flaw allows an attacker with low privileges to execute arbitrary code with SYSTEM privileges by exploiting insecure permissions during the browser's update process. Effective mitigation of this issue is crucial for maintaining user security and protecting sensitive data from unauthorized access.

References