VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 16, 2014· Updated Jun 17, 2026

CVE-2014-4936

CVE-2014-4936

Description

The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Malwarebytes/Anti-Exploit2 versions
    cpe:2.3:a:malwarebytes:malwarebytes_anti-exploit:*:*:*:*:consumer:*:*:*+ 1 more
    • cpe:2.3:a:malwarebytes:malwarebytes_anti-exploit:*:*:*:*:consumer:*:*:*range: <=1.04.1.1012
    • (no CPE)range: <=1.04.1.1012
  • Malwarebytes/Anti Malware2 versions
    cpe:2.3:a:malwarebytes:malwarebytes_anti-malware:*:*:*:*:consumer:*:*:*+ 1 more
    • cpe:2.3:a:malwarebytes:malwarebytes_anti-malware:*:*:*:*:consumer:*:*:*range: <=2.02
    • (no CPE)range: <2.0.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.