Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path. Attackers can place executable files in unquoted path directories that execute with LocalSystem privileges during service startup or system reboot.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2022-50971 Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicio… https://www.cve.org/CVERecord?id=CVE-2022-50971
Post summary
CVE‑2022‑50971 exposes an unquoted service path privilege escalation flaw in Malwarebytes 4.5, enabling local attackers to inject malicious code into the MBAMService executable.
🚨*CVE* CVE-2022-50971 Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicio… https://www.cve.org/CVERecord?id=CVE-2022-50971 ----- Traducción: CVE-2022-50971 Mal… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2022‑50971, noting an unquoted service path bug in Malwarebytes MBAMService that can be abused for local privilege escalation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | malwarebytes | malwarebytes | - | windows | - |