CVE-2020-25533: Race Condition
An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can construct a situation where the same PID is used for running two different programs at different times, by leveraging a race condition during crafted use of posixspawn.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25533?
CVE-2020-25533 is classified as a high severity vulnerability due to its ability to allow unauthorized privileged actions.
How do I fix CVE-2020-25533?
To mitigate CVE-2020-25533, update Malwarebytes to version 4.0 or later on macOS.
What is the impact of CVE-2020-25533?
The impact of CVE-2020-25533 includes the potential for a malicious application to perform privileged actions within the Malwarebytes service.
Which versions of Malwarebytes are affected by CVE-2020-25533?
Malwarebytes versions prior to 4.0 on macOS are affected by CVE-2020-25533.
Is CVE-2020-25533 a remote or local vulnerability?
CVE-2020-25533 is a local vulnerability, as it requires an attacker to be able to execute code on the affected macOS system.