CVE-2023-26088: In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system

High severity · published Mar 23, 2023

CVE-2023-26088

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system

7.8

CVSS

0.5%

EPSS

On KEV

Description

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 41% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Malwarebytes · Malwarebytes

before 4.5.23 · source: NVD

Affected product

Malwarebytes

All Malwarebytes CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-26088

CVE.org

https://www.cve.org/CVERecord?id=CVE-2023-26088

Release Notes

https://support.malwarebytes.com/hc/en-us/articles/14279575968659-Malwarebytes-for-Windows-4-5-23-Release-Notes

Vendor Advisory

https://www.malwarebytes.com/secure/cves/cve-2023-26088