CVE-2021-25262 MEDIUM

CVE-2021-25262: Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.

Vendor Yandex
Product Browser
Weakness CWE-116
Published May 21, 2025
Last update May 21, 2025

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.

Key dates

02Disclosure timeline

May 21, 2025 CVE published
May 21, 2025 Record updated