Read the docs

Malwarebytes

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

Malwarebytes records in CISA KEV

No Malwarebytes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

17 records in Malwarebytes · all components

Priority HIGH 72

Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00225 Published 2026-06-19 No fix listed CWE-428
Priority HIGH 69

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00484 Published 2018-01-08 No fix listed CWE-20
Priority HIGH 69

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00413 Published 2018-01-08 No fix listed CWE-20
Priority MEDIUM 49

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00385 Published 2018-01-08 No fix listed CWE-20
Priority LOW 35

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00492 Published 2018-01-08 No fix listed CWE-20
Priority LOW 25

In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesy…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00281 Published 2023-06-30 No fix listed CWE-290
Open these records in search →