Priority HIGH 72
Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2026-06-19 · No fix listed CWE-428
Priority LOW 15
Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00212 · Published 2025-12-12 · No fix listed CWE-190
Priority LOW 20
In Malwarebytes Binisoft Windows Firewall Control before 6.16.0.0, the installer is vulnerable to local privilege escalation.
CVSS 3.1MEDIUM 4.5· Local · No auth · No interaction · EPSS 0.00125 · Published 2025-07-28 · Fixed in 6.16.0.0 CWE-863
Priority LOW 36
Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00293 · Published 2024-11-22 · No fix listed CWE-59
Priority MEDIUM 52
Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01796 · Published 2024-02-04 · No fix listed CWE-94
Priority LOW 25
In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesy…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00281 · Published 2023-06-30 · No fix listed CWE-290
Priority LOW 36
The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00314 · Published 2023-06-30 · No fix listed CWE-640
Priority LOW 33
Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message in which FullFileNamePath lacks a '\0' character.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00401 · Published 2023-06-30 · No fix listed CWE-59
Priority HIGH 69
Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00679 · Published 2023-06-26 · No fix listed
Priority LOW 35
Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user t…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00489 · Published 2023-03-29 · No fix listed CWE-59
Priority LOW 37
In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00475 · Published 2023-03-23 · No fix listed CWE-59
Priority LOW 34
In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the Tools tab can be used to escalate privileges.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00453 · Published 2022-02-14 · No fix listed CWE-269
Priority LOW 30
An issue was discovered in Malwarebytes before 4.0 on macOS.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0027 · Published 2021-01-15 · No fix listed CWE-362
Priority LOW 33
In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00773 · Published 2020-12-22 · No fix listed CWE-59
Priority LOW 36
An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00881 · Published 2020-04-06 · No fix listed CWE-426
Priority LOW 36
An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner before 8.0.1 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded by the product.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00871 · Published 2019-12-23 · No fix listed CWE-426
Priority MEDIUM 50
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Antimalware 3.6.1.2711.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.09903 · Published 2019-06-03 · No fix listed CWE-78
Priority LOW 37
A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attacker to take control of the whitelisting feature (exclusions.da…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01244 · Published 2018-03-21 · No fix listed CWE-254
Priority HIGH 69
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00484 · Published 2018-01-08 · No fix listed CWE-20
Priority MEDIUM 49
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00385 · Published 2018-01-08 · No fix listed CWE-20
Priority LOW 36
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0042 · Published 2018-01-08 · No fix listed CWE-20
Priority LOW 34
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0042 · Published 2018-01-08 · No fix listed CWE-20
Priority LOW 34
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E0…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0042 · Published 2018-01-08 · No fix listed CWE-20
Priority LOW 34
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E0…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0042 · Published 2018-01-08 · No fix listed CWE-20
Priority LOW 34
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e0…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0042 · Published 2018-01-08 · No fix listed CWE-20
Load more