Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Malwarebytes AdwCleaner before v.8.7.0 runs as Administrator and performs an insecure log file delete operation in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link, a related issue to CVE-2023-28892. To exploit this, an attacker must create a file in a given folder path and intercept the application log file deletion flow.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-17 | 2 | Disclosure2 |
| 2026-02-22 | 1 | General1 |
CVE-2025-67905 Malwarebytes AdwCleaner before v.8.7.0 runs as Administrator and performs an insecure log file delete operation in which the target location is user-controllable, all… https://www.cve.org/CVERecord?id=CVE-2025-67905
Post summary
Malwarebytes AdwCleaner prior to version 8.7.0 executes with administrator rights and deletes log files using a user‑controlled target path, exposing an insecure file‑deletion flaw.
CVE-2025-67905 Malwarebytes AdwCleaner Local Privilege Escalation via Symbolic Link Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-67905
Post summary
A concise disclosure of CVE-2025-67905, identifying a local privilege escalation flaw in Malwarebytes AdwCleaner caused by symbolic link manipulation, with no PoC, exploit code, active exploitation, or patch information provided.
CVE-2025-67905 (CVSS:8.7, HIGH) is Awaiting Analysis. Malwarebytes AdwCleaner before v.8.7.0 runs as Administrator and performs an insecure log file delete operation in which..https://nvd.nist.gov/vuln/detail/CVE-2025-67905 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post highlights CVE-2025-67905 with a high CVSS score and notes an insecure log file delete operation in older Malwarebytes AdwCleaner versions, but offers no evidence of exploitation or mitigation.