Local Quarantine Vulnerability in Malwarebytes Software

CVE-2023-26088

What is CVE-2023-26088?

In Malwarebytes versions prior to 4.5.23, a vulnerability exists that allows an attacker to exploit the local quarantine feature using symbolic links. This exploitation could enable unauthorized deletion of arbitrary files from the system. Additionally, there are scenarios where this vulnerability may facilitate privilege escalation, potentially allowing malicious users to gain higher access levels than intended.

References