CVE Intelligence

Malwarebytes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Malwarebytes products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2022-50971 High · 7.8 CWE-428 Jun 19, 2026
Malwarebytes 4.5 Unquoted Service Path Privilege Escalation
Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path. Attackers can place executable files in unquoted path directories that execute with LocalSystem privileges during service startup or system reboot.
CVE-2023-29144 Low · 3.3 CWE-190 Dec 12, 2025
Integer Overflow or Wraparound in Malwarebytes
Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a bypass of detection.