High severity7.8NVD Advisory· Published Mar 23, 2023· Updated Jun 17, 2026

CVE-2023-26088

Description

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation in certain scenarios.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Malwarebytes/Malwarebytes2 versions
cpe:2.3:a:malwarebytes:malwarebytes:*:*:*:*:*:windows:*:*+ 1 more
- cpe:2.3:a:malwarebytes:malwarebytes:*:*:*:*:*:windows:*:*range: <4.5.23
- (no CPE)
Malwarebytes/Malwarebytes for Windowsllm-create
Range: <4.5.23

Patches

Vulnerability mechanics

References

www.malwarebytes.com/secure/cves/cve-2023-26088nvdVendor Advisory
support.malwarebytes.com/hc/en-us/articles/14279575968659-Malwarebytes-for-Windows-4-5-23-Release-NotesnvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000