CVEvulnerability
CVE-2023-26088
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-03-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-59
Description
In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios.
Affected configurations
• malwarebytes malwarebytes (< 4.5.23)
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- https://support.malwarebytes.com/hc/en-us/articles/14279575968659-Malwarebytes-for-Windows-4-5-23-Release-Notes Release Notes
- https://www.malwarebytes.com/secure/cves/cve-2023-26088 Vendor Advisory
- https://support.malwarebytes.com/hc/en-us/articles/14279575968659-Malwarebytes-for-Windows-4-5-23-Release-Notes Release Notes
- https://www.malwarebytes.com/secure/cves/cve-2023-26088 Vendor Advisory