high7.8
CVE-2023-28892
Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the targ…
Impact
Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Malwarebytes | Adwcleaner | through 8.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://forums.malwarebytes.com/topic/307429-release-adwcleaner-841/
- https://malwarebytes.com
- https://www.malwarebytes.com/secure/cves/cve-2023-28892
- https://forums.malwarebytes.com/topic/307429-release-adwcleaner-841/
- https://malwarebytes.com
- https://www.malwarebytes.com/secure/cves/cve-2023-28892