CVE-2025-5469

Uncontrolled Search Path Element vulnerability in Yandex Messenger on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.245

Score

CVSS 4.0 7.3 High

Status

Deferred - browser-security@yandex-team.ru

Published

2025-12-09

Last modified

2026-10-07

Weaknesses

CWE-427

Affected products

• Messenger (Yandex)

References

• https://yandex.com/bugbounty/i/hall-of-fame-products