Description (CNA)
Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://malwarebytes.com
- https://www.malwarebytes.com/secure/cves/cve-2023-28892
- https://forums.malwarebytes.com/topic/307429-release-adwcleaner-841/
ADP enrichment
No English description supplied.