Y

Yandex

Bug Bounty ↗ 📈 NASDAQ:YNDX
C
CAUTION
10
Total CVEs
0
Crit / High
1
Medium
0%
Unpatched
0%
Patched
5.9
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
0%
Under Review
100%
✓ 0 patched ✗ 0 unpatched ~ 12 under review
▸ Stock — NASDAQ:YNDX Yahoo Finance ↗

No data — run stock_fetcher.py first

▸ Intelligence by Audience
PoC Available
1 / 20 shown
CISA KEV (Exploited)
0
Top EPSS (Exploitation Probability)
CVE-2021-25255 0.79% exploitation probability
CVE-2024-6473 0.71% exploitation probability
CVE-2021-25254 0.54% exploitation probability
CVE-2021-25262 0.44% exploitation probability
CVE-2023-26226 0.37% exploitation probability
🎯 Bug Bounty Program: https://yandex.com/bugbounty/
Quick Facts for Reporting
Total CVEs tracked
10
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
5.9
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-06-14
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Yandex Data Center Outage Disrupts Access to Cloud Files Following Drone Attack - CyberSecurityNews
CyberSecurityNews 3d ago
Yandex data center attacks expose wider cyber risks - Cybernews
Cybernews 2d ago
Cybersecurity News: Top level domain theft, Yandex attacked, Cisco Nexus flaws - CISO Series
CISO Series 2026-10-09
Ukraine Strikes Yandex Data Centers. Russia’s Bot Traffic Nearly Vanishes - Yahoo Tech
Yahoo Tech 3d ago
Could Ukraine Strikes on Russian Data Center Impact Bots? What We Know - Newsweek
Newsweek 3d ago
Moldova probes Russian taxi app Yandex over security - Moldova 1
Moldova 1 2d ago
▸ Recent CVEs showing 20 of 12
CVE IDSeverityPatchEPSSDate
CVE-2026-25865 8.5 HIGH PATCH UNDER REVIEW 0.20% 2026-06-18
CVE-2026-10549 5.3 MEDIUM PATCH UNDER REVIEW 0.27% 2026-06-02
CVE-2025-5469 7.3 HIGH PATCH UNDER REVIEW 0.17% 2025-12-09
CVE-2025-5471 7.3 HIGH PATCH UNDER REVIEW 0.18% 2025-12-09
CVE-2025-5470 7.3 HIGH PATCH UNDER REVIEW 0.18% 2025-12-09
CVE-2025-48352 PoC 5.9 MEDIUM PATCH UNDER REVIEW 0.04% 2025-08-28
CVE-2024-12168 8.4 HIGH PATCH UNDER REVIEW 0.16% 2025-06-02
CVE-2023-26226 7.4 HIGH PATCH UNDER REVIEW 0.37% 2025-05-30
CVE-2021-25262 6.9 MEDIUM PATCH UNDER REVIEW 0.44% 2025-05-21
CVE-2021-25255 8.3 HIGH PATCH UNDER REVIEW 0.79% 2025-05-21
CVE-2021-25254 8.2 HIGH PATCH UNDER REVIEW 0.54% 2025-05-21
CVE-2024-6473 8.4 HIGH PATCH UNDER REVIEW 0.71% 2024-09-03
View all 12 CVEs for Yandex →
▸Intel
HQMoscow, Russia
Founded1997
Employees20,000
CEOArtem Savinovsky
Ticker NASDAQ:YNDX ↗
Bug BountyView Program ↗
Trust ScoreC — CAUTION
Max CVSS5.9
Last Updated2026-06-14
▸Top Weaknesses
CWE-427
Unknown Weakness Type
4 occurrences in Yandex CVEs (40% of total)
CWE-427 ⓘ
4
CWE-451
Unknown Weakness Type
2 occurrences in Yandex CVEs (20% of total)
CWE-451 ⓘ
2
CWE-400
Uncontrolled Resource Consumption
1 occurrence in Yandex CVEs (10% of total)
CWE-400 ⓘ
1
CWE-416
Use After Free
1 occurrence in Yandex CVEs (10% of total)
CWE-416 ⓘ
1
CWE-79
Cross-Site Scripting (XSS)
1 occurrence in Yandex CVEs (10% of total)
CWE-79 ⓘ
1
CWE-426
Unknown Weakness Type
1 occurrence in Yandex CVEs (10% of total)
CWE-426 ⓘ
1
▸Company Profile

Yandex is a Russian multinational technology company specializing in internet-related services and products, including its flagship search engine, web portals, and digital advertising. It also develops Yandex Cloud, a major cloud computing platform in Russia, and various AI-driven products such as Yandex Browser and Yandex Maps. From a cybersecurity perspective, Yandex's software and services have been subject to vulnerabilities tracked in CVE databases, and the company maintains a bug bounty program to address security issues.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +800% worse
CVE count 2025 vs 2024:  1 → 9 CVEs
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M

Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Yandex C valtersit.com