Back to Database
Status published
High
CVE-2025-5470
Dylib Hijacking in Yandex Disk
Vulnerability Description
Uncontrolled Search Path Element vulnerability in Yandex Disk on MacOS allows Search Order Hijacking.This issue affects Disk: before 3.2.45.3275.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-5470
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Egor Filatov, Positive Technologies
More from Yandex
View All →CVE-2025-5471
Dylib Hijacking in Yandex Telemost
High
7.3
CVE-2025-5469
Dylib Hijacking in Yandex Messenger
High
7.3
CVE-2024-6473
DLL Hijacking in Yandex Browser
High
8.4
CVE-2024-12168
DLL Hijacking in Yandex Telemost
High
8.4
CVE-2023-26226
A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682
High
7.4
Affected Vendor
Yandex
View all reports →Affected Software
Disk
Vulnerable Versions:
0
Timeline
Official Publish:
December 9th, 2025
Last Modified:
December 9th, 2025
Added to House:
July 22nd, 2026