Vulnerabilities

TI-2022-26423 CVE-2022-50971 · GHSA-h259-67jx-3q85

Malwarebytes 4.5 Unquoted Service Path Privilege Escalation

HIGH 72

Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00225 Published 2026-06-19 No fix listed CWE-428

TI-2023-13577 CVE-2023-29144 · GHSA-w37p-hc4m-chqj

Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios.

LOW 15

Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00212 Published 2025-12-12 No fix listed CWE-190

TI-2023-13580 CVE-2023-29147 · GHSA-jx37-m37q-v7c2

In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that…

LOW 25

In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesy…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00281 Published 2023-06-30 No fix listed CWE-290

TI-2023-13578 CVE-2023-29145 · GHSA-pmmp-296p-3p5g

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of…

LOW 36

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00314 Published 2023-06-30 No fix listed CWE-640

TI-2023-11316 CVE-2023-26088 · GHSA-xrg5-9qxv-fc56

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on…

LOW 37

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00475 Published 2023-03-23 No fix listed CWE-59

TI-2020-15588 CVE-2020-25533 · GHSA-p523-j8f3-523j

An issue was discovered in Malwarebytes before 4.0 on macOS.

LOW 30

An issue was discovered in Malwarebytes before 4.0 on macOS.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0027 Published 2021-01-15 No fix listed CWE-362

TI-2020-17370 CVE-2020-28641 · GHSA-h7g5-p978-f45g

In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on…

LOW 33

In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00773 Published 2020-12-22 No fix listed CWE-59

TI-2018-03832 CVE-2018-5279 · GHSA-5g84-3cjh-4qxf

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to…

HIGH 69

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00484 Published 2018-01-08 No fix listed CWE-20

TI-2018-03831 CVE-2018-5278 · GHSA-6v57-w998-vgwf

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to…

MEDIUM 49

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00385 Published 2018-01-08 No fix listed CWE-20

TI-2018-03830 CVE-2018-5277 · GHSA-x849-q9fw-685q

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to…

LOW 36

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0042 Published 2018-01-08 No fix listed CWE-20

TI-2018-03829 CVE-2018-5276 · GHSA-xx57-vj9h-w5gx

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to…

LOW 34

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0042 Published 2018-01-08 No fix listed CWE-20

TI-2018-03828 CVE-2018-5275 · GHSA-6469-fw86-mxjf

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to…

LOW 34

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E0…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0042 Published 2018-01-08 No fix listed CWE-20

TI-2018-03827 CVE-2018-5274 · GHSA-xf86-9h3x-2jxg

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to…

LOW 34

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E0…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0042 Published 2018-01-08 No fix listed CWE-20

TI-2018-03826 CVE-2018-5273 · GHSA-rfgj-9mv8-wcc9

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to…

LOW 34

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0042 Published 2018-01-08 No fix listed CWE-20

TI-2018-03825 CVE-2018-5272 · GHSA-5jcx-8c3m-2pqf

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to…

LOW 34

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0042 Published 2018-01-08 No fix listed CWE-20

TI-2018-03824 CVE-2018-5271 · GHSA-vvx5-pmqh-6c2v

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to…

LOW 35

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00492 Published 2018-01-08 No fix listed CWE-20

TI-2018-03823 CVE-2018-5270 · GHSA-42w6-9v7c-hw9f

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to…

HIGH 69

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00413 Published 2018-01-08 No fix listed CWE-20

Vulnerabilities

Filters