CVE-2023-26088

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system

published March 23, 2023

CVSS
—
EPSS
0%
Percentile
40.1
In the wild
Unconfirmed
What it is

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00475 · 40.1th percentile
Published
2023-03-23T00:00Z
EPSS history
Timeline
  • 23 MAR 00:00Z
    In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system
    cvelistv5