1. Home
  2. CVE Database
  3. CVE-2022-50971
HIGH · 7.8

CVE-2022-50971

Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path....

Vulnerability Description

Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path. Attackers can place executable files in unquoted path directories that execute with LocalSystem privileges during service startup or system reboot.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
MalwarebytesMalwarebytes<= 4.5.0

Related Weaknesses (CWE)

CWE-428

References

FAQ

What is CVE-2022-50971?

CVE-2022-50971 is a vulnerability with a CVSS score of 7.8 (HIGH). Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path....

How severe is CVE-2022-50971?

CVE-2022-50971 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-50971?

Check the references section above for vendor advisories and patch information. Affected products include: Malwarebytes Malwarebytes.