High severity7.8NVD Advisory· Published Jun 19, 2026· Updated Jun 26, 2026
CVE-2022-50971
CVE-2022-50971
Description
Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path. Attackers can place executable files in unquoted path directories that execute with LocalSystem privileges during service startup or system reboot.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:malwarebytes:malwarebytes:*:*:*:*:*:windows:*:*+ 1 more
- cpe:2.3:a:malwarebytes:malwarebytes:*:*:*:*:*:windows:*:*range: <=4.5.0
- (no CPE)range: 4.5
- Range: 4.5
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/50806nvdVDB EntryExploit
- www.vulncheck.com/advisories/malwarebytes-unquoted-service-path-privilege-escalationnvdThird Party Advisory
- www.malwarebytes.comnvdProduct
- www.malwarebytes.com/mwb-download/nvdProduct
News mentions
0No linked articles in our index yet.