high7.8
CVE-2023-26088
In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system.
Impact
In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Malwarebytes | Malwarebytes | before 4.5.23 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.malwarebytes.com/hc/en-us/articles/14279575968659-Malwarebytes-for-Windows-4-5-23-Release-Notes
- https://www.malwarebytes.com/secure/cves/cve-2023-26088
- https://support.malwarebytes.com/hc/en-us/articles/14279575968659-Malwarebytes-for-Windows-4-5-23-Release-Notes
- https://www.malwarebytes.com/secure/cves/cve-2023-26088