CVE-2023-27469

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message in which FullFileNamePath lacks a '\0' character.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published: Jun 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-27475.5The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.CVE-2023-274707.0BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PRO CVE-2023-274715.5An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate informat CVE-2023-274726.1quickentity-editor-next is an open source, system local, video game asset editor. In affected versions HTML tags in entity names are not san CVE-2023-274745.4Directus is a real-time API and App dashboard for managing SQL database content. Instances relying on an allow-listed reset URL are vulnerab CVE-2023-274758.8Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip z CVE-2023-274767.5OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards, and their related c CVE-2023-274774.3wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the CVE-2023-274786.5libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previ CVE-2023-274799.9XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with CVE-2023-274807.7XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with CVE-2023-274814.3Directus is a real-time API and App dashboard for managing SQL database content. In versions prior to 9.16.0 users with read access to the `