CVE-2020-28641

In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system.

Score

CVSS 3.1 7.1 High

Status

Modified - cve@mitre.org

Published

2020-12-22

Last modified

2024-08-04

Weaknesses

CWE-59

Affected products

• Endpoint Protection (Malwarebytes)
• Malwarebytes (Malwarebytes)

References

• https://support.malwarebytes.com/hc/en-us/articles/1500000403501-Arbitrary-file-deletion-vulnerability-fixed-in-Malware…
• https://support.malwarebytes.com/hc/en-us/articles/360058885974-Arbitrary-file-deletion-vulnerability-fixed-in-Malwareb…
• https://www.malwarebytes.com