1. Home
  2. CVE Database
  3. CVE-2023-26088
HIGH · 7.8

CVE-2023-26088

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenar...

Vulnerability Description

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
MalwarebytesMalwarebytes< 4.5.23

Related Weaknesses (CWE)

CWE-59

References

FAQ

What is CVE-2023-26088?

CVE-2023-26088 is a vulnerability with a CVSS score of 7.8 (HIGH). In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenar...

How severe is CVE-2023-26088?

CVE-2023-26088 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-26088?

Check the references section above for vendor advisories and patch information. Affected products include: Malwarebytes Malwarebytes.