ZDI-26-267: Malwarebytes Anti-Malware Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Malwarebytes Anti-Malware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-267?
The severity of ZDI-26-267 is rated at a CVSS score of 7.8, indicating a high risk.
How do I fix ZDI-26-267?
To fix ZDI-26-267, ensure that you update Malwarebytes Anti-Malware to the latest version provided by the vendor.
Who is affected by ZDI-26-267?
Users with affected installations of Malwarebytes Anti-Malware may be vulnerable to local privilege escalation.
What type of vulnerability is ZDI-26-267?
ZDI-26-267 is classified as an uncontrolled search path element local privilege escalation vulnerability.
What must an attacker do to exploit ZDI-26-267?
An attacker must first gain the ability to execute low-privileged code on the target system to exploit ZDI-26-267.