File and Path Handling

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded.CVE-2020-11507Malwarebytes · 0.9% likely

   CWE-426

2. An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner before 8.0.1 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded b…CVE-2019-19929Malwarebytes · 0.9% likely

   CWE-426

3. In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system.CVE-2020-28641Malwarebytes · 0.8% likely

   CWE-59

4. Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-…CVE-2023-28892Malwarebytes · 0.5% likely

   CWE-59

5. In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalat…CVE-2023-26088Malwarebytes · 0.5% likely

   CWE-59

6. Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message in which FullFileNamePath lacks a '\0' character.CVE-2023-27469Malwarebytes · 0.4% likely

   CWE-59

7. Malwarebytes Antimalware Link Following Local Privilege Escalation VulnerabilityCVE-2024-6260Malwarebytes · CVSS 7 · 0.3% likely

   CWE-59

8. Malwarebytes 4.5 Unquoted Service Path Privilege EscalationCVE-2022-50971Malwarebytes · CVSS 7.8 · 0.2% likely

   CWE-428

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.