CVE-2020-25533
High
Description
An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can construct a situation where the same PID is used for running two different programs at different times, by leveraging a race condition during crafted use of posix_spawn.
SeverityHigh
CVSS7.0
Exploit probability—
ProductMalwarebytes
PublishedJan 15, 2021
First seenJan 15, 2021
How to fix
Update
- malwarebytes malwarebytes4.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| malwarebytes malwarebytes | v < 4.0 | 4.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.