Malwarebytes vulnerabilities
We track 6 vulnerabilities in Malwarebytes products across 6 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on June 19, 2026.
Latest Malwarebytes vulnerabilities
- 7.8 High severity
Malwarebytes: Unquoted Search Path or Element
Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path. Attackers can place executable files in unquoted path direc
- 7.8 High severity
Anti-Malware: Improper Link Resolution Before File Access
Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Malwarebytes Antimalware. An attacker must first obtain the ability to execute low-p
- 7.8 High severity
Endpoint Detection And Response: Weak Password Recovery Mechanism for Forgotten Password
The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugg
- 7.1 High severity
Anti-exploit: Improper Link Resolution Before File Access
Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message in which FullFileNamePath lacks a '\0' character.
- 7.8 High severity
Adwcleaner: Improper Link Resolution Before File Access
Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a sy
- 7.8 High severity
Malwarebytes: Improper Link Resolution Before File Access
In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios.