Skip to content
Noroxi

Malwarebytes records

30 published records for vendor malwarebytes.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 3.3%
Pre-auth RCE
3
With a fix record
10%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

30 records
  • CVE-2014-4936
    42Plan

    The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.101

    CriticalCVSS 9.3WeaponizedEPSS 17%

    malwarebytes · malwarebytes anti-exploitDec 16, 2014

  • CVE-2024-25089
    40Plan

    Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes.

    CriticalCVSS 9.8No exploitEPSS 2%

    malwarebytes · binisoft windows firewall controlFeb 4, 2024

  • CVE-2019-6739
    38Monitor

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Antimalware 3.6.1.2711.

    HighCVSS 8.8No exploitEPSS 10%

    malwarebytes · antimalwareJun 3, 2019

  • CVE-2022-50971
    34Monitor

    Malwarebytes 4.5 Unquoted Service Path Privilege Escalation

    HighCVSS 8.5No exploitEPSS 0%

    malwarebytes · malwarebytesJun 19, 2026

  • CVE-2016-10717
    31Monitor

    A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.

    HighCVSS 7.8No exploitEPSS 1%

    malwarebytes · malwarebytes anti-malwareMar 21, 2018

  • CVE-2020-11507
    31Monitor

    An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a m

    HighCVSS 7.8No exploitEPSS 1%

    malwarebytes · adwcleanerApr 6, 2020

  • CVE-2019-19929
    31Monitor

    An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner before 8.0.1 could cause arbitrary code execution with SYSTEM privileges w

    HighCVSS 7.8No exploitEPSS 1%

    malwarebytes · adwcleanerDec 22, 2019

  • CVE-2023-36631
    31Monitor

    Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Window

    HighCVSS 7.8No exploitEPSS 1%

    malwarebytes · binisoft windows firewall controlJun 26, 2023

  • CVE-2018-5271
    31Monitor

    In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have uns

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · malwarebytesJan 8, 2018

  • CVE-2023-28892
    31Monitor

    Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.lo

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · adwcleanerMar 29, 2023

  • CVE-2018-5279
    31Monitor

    In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have uns

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · malwarebytesJan 8, 2018

  • CVE-2023-26088
    31Monitor

    In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · malwarebytesMar 22, 2023

  • CVE-2022-25150
    31Monitor

    In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the Tools tab can be used to escalate privileges.

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · binisoft windows firewall controlFeb 14, 2022

  • CVE-2018-5276
    31Monitor

    In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have uns

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · malwarebytesJan 8, 2018

  • CVE-2018-5275
    31Monitor

    In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have uns

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · malwarebytesJan 8, 2018

  • CVE-2018-5274
    31Monitor

    In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have uns

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · malwarebytesJan 8, 2018

  • CVE-2018-5273
    31Monitor

    In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have uns

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · malwarebytesJan 8, 2018

  • CVE-2018-5277
    31Monitor

    In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have uns

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · malwarebytesJan 8, 2018

  • CVE-2018-5272
    31Monitor

    In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have uns

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · malwarebytesJan 8, 2018

  • CVE-2018-5270
    31Monitor

    In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have uns

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · malwarebytesJan 8, 2018

  • CVE-2023-29145
    31Monitor

    The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowi

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · endpoint detection and responseJun 30, 2023

  • CVE-2024-6260
    31Monitor

    Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    malwarebytes · antimalwareNov 22, 2024

  • CVE-2020-28641
    28Monitor

    In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system.

    HighCVSS 7.1No exploitEPSS 1%

    malwarebytes · endpoint protectionDec 22, 2020

  • CVE-2023-27469
    28Monitor

    Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message in which FullFileName

    HighCVSS 7.1No exploitEPSS 0%

    malwarebytes · anti-exploitJun 30, 2023

  • CVE-2020-25533
    28Monitor

    An issue was discovered in Malwarebytes before 4.0 on macOS.

    HighCVSS 7.0No exploitEPSS 0%

    malwarebytes · malwarebytesJan 15, 2021