Skip to content

Malwarebytes · product

Malwarebytes

17 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

  1. In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system.CVE-2020-28641Malwarebytes · 0.8% likely

    CWE-59

  2. In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not va…CVE-2018-5271Malwarebytes · 0.5% likely

    CWE-20

  3. In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not va…CVE-2018-5279Malwarebytes · CVSS 7.8 · 0.5% likely

    CWE-20

  4. In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalat…CVE-2023-26088Malwarebytes · 0.5% likely

    CWE-59

  5. In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not va…CVE-2018-5277Malwarebytes · 0.4% likely

    CWE-20

  6. In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not va…CVE-2018-5276Malwarebytes · 0.4% likely

    CWE-20

  7. In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not va…CVE-2018-5275Malwarebytes · 0.4% likely

    CWE-20

  8. In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not va…CVE-2018-5274Malwarebytes · 0.4% likely

    CWE-20

  9. In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not va…CVE-2018-5273Malwarebytes · 0.4% likely

    CWE-20

  10. In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not va…CVE-2018-5272Malwarebytes · 0.4% likely

    CWE-20

  11. In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not va…CVE-2018-5270Malwarebytes · CVSS 7.8 · 0.4% likely

    CWE-20

  12. In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not va…CVE-2018-5278Malwarebytes · CVSS 3.3 · 0.4% likely

    CWE-20

  13. The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attack…CVE-2023-29145Malwarebytes · 0.3% likely

    CWE-640

  14. In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced,…CVE-2023-29147Malwarebytes · 0.3% likely

    CWE-290

  15. An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged…CVE-2020-25533Malwarebytes · 0.3% likely

    CWE-362

  16. Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a bypass of detection.CVE-2023-29144Malwarebytes · CVSS 3.3 · 0.2% likely

    CWE-190

  17. Malwarebytes 4.5 Unquoted Service Path Privilege EscalationCVE-2022-50971Malwarebytes · CVSS 7.8 · 0.2% likely

    CWE-428

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in