Malwarebytes up to 4.5.22 on Windows Local Quarantine System symlink

Summaryinfo

A vulnerability identified as critical has been detected in Malwarebytes up to 4.5.22 on Windows. This issue affects some unknown processing of the component Local Quarantine System. This manipulation causes symlink. This vulnerability is registered as CVE-2023-26088. The attack needs to be launched locally. No exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability has been found in Malwarebytes up to 4.5.22 on Windows (Anti-Malware Software) and classified as critical. Affected by this vulnerability is some unknown functionality of the component Local Quarantine System. The manipulation with an unknown input leads to a symlink vulnerability. The CWE definition for the vulnerability is CWE-61. The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios.

The weakness was published 03/23/2023. The advisory is shared at support.malwarebytes.com. This vulnerability is known as CVE-2023-26088 since 02/20/2023. Neither technical details nor an exploit are publicly available.

Upgrading to version 4.5.23 eliminates this vulnerability. The upgrade is hosted for download at support.malwarebytes.com.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-29962). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Anti-Malware Software

Name

• Malwarebytes

Version

• 4.5.0
• 4.5.1
• 4.5.2
• 4.5.3
• 4.5.4
• 4.5.5
• 4.5.6
• 4.5.7
• 4.5.8
• 4.5.9
• 4.5.10
• 4.5.11
• 4.5.12
• 4.5.13
• 4.5.14
• 4.5.15
• 4.5.16
• 4.5.17
• 4.5.18
• 4.5.19
• 4.5.20
• 4.5.21
• 4.5.22

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion