CVE-2023-28892

Malwarebytes AdwCleaner 8.4.0 is affected by an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log where the target is user‑controllable. This enables a non‑admin user to escalate to SYSTEM via a symbolic link. Root cause: insecure handling of deletion in a user‑controllabl...