Privilege Escalation in Malwarebytes For Teams by Malwarebytes
CVE-2021-43768

5.3MEDIUM

Key Information:

Vendor

Malwarebytes

Status
Malwarebytes For Teams
Vendor
CVE Published:
24 October 2025

What is CVE-2021-43768?

A privilege escalation vulnerability exists in Malwarebytes For Teams prior to version 1.0.1003, which can be exploited through the COM interface during the operation of the mbamservice.exe process. This flaw allows attackers to gain elevated privileges, potentially compromising the security of the affected system.

References

https://hackerone.com/reports/895316
https://www.malwarebytes.com/secure/cves/cve-2021-43768

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.