CVE-2023-26088

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios...

CVE-2023-26088

Malwarebytes (Windows) prior to version 4.5.23 is affected by CVE-2023-26088 due to a symbolic link abuse in the local quarantine system, which can be leveraged to delete arbitrary files and may enable privilege escalation in certain scenarios. The vulnerability targets the quarantine handling co...