Malwarebytes vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2022-50971 Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting mHigh 8.5 · Jun 19, 2026
• CVE-2024-6260 Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability.High 7.8 · Nov 22, 2024
• CVE-2024-25089 Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes.Critical 9.8 · Feb 4, 2024
• CVE-2023-29145 The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code exHigh 7.8 · Jun 30, 2023
• CVE-2023-27469 Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message in which FullFileNamePath lacks a '\0' chHigh 7.1 · Jun 30, 2023
• CVE-2023-36631 Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictiHigh 7.8 · Jun 26, 2023
• CVE-2023-28892 Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the targeHigh 7.8 · Mar 29, 2023
• CVE-2023-26088 In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system.High 7.8 · Mar 22, 2023
• CVE-2022-25150 In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the Tools tab can be used to escalate privileges.High 7.8 · Feb 14, 2022
• CVE-2020-25533 An issue was discovered in Malwarebytes before 4.0 on macOS.High 7 · Jan 15, 2021
• CVE-2020-28641 In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system.High 7.1 · Dec 22, 2020
• CVE-2020-11507 An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL libraryHigh 7.8 · Apr 6, 2020
• CVE-2019-19929 An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner before 8.0.1 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL High 7.8 · Dec 22, 2019
• CVE-2019-6739 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Antimalware 3.6.1.2711.High 8.8 · Jun 3, 2019
• CVE-2016-10717 A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attackeHigh 7.8 · Mar 21, 2018
• CVE-2018-5279 In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impacHigh 7.8 · Jan 8, 2018
• CVE-2018-5277 In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impacHigh 7.8 · Jan 8, 2018
• CVE-2018-5276 In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impacHigh 7.8 · Jan 8, 2018
• CVE-2018-5275 In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impacHigh 7.8 · Jan 8, 2018
• CVE-2018-5274 In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impacHigh 7.8 · Jan 8, 2018
• CVE-2018-5273 In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impacHigh 7.8 · Jan 8, 2018
• CVE-2018-5272 In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impacHigh 7.8 · Jan 8, 2018
• CVE-2018-5271 In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impacHigh 7.8 · Jan 8, 2018
• CVE-2018-5270 In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impacHigh 7.8 · Jan 8, 2018
• CVE-2014-4936 The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow High 9.3 · Dec 16, 2014