CVE-2021-25254 HIGH

CVE-2021-25254: Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

Vendor Yandex
Product Browser Lite
Weakness CWE-116
Published May 21, 2025
Last update May 21, 2025
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

What the vulnerability does

01Description

Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

Key dates

02Disclosure timeline

May 21, 2025 CVE published
May 21, 2025 Record updated