cvedb.io
CVE-2023-26088
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2023-03-23T01:15:12.180 · Last modified 2026-06-17T05:42:39.013

Summary

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios.

Affected products

malwarebytes — malwarebytes

Does this affect you?

Add your gear to cvedb and we'll alert you only when malwarebytes ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.