Malwarebytes AdwCleaner Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Malwarebytes AdwCleaner versions prior to 8.7.0. The application runs with administrative privileges and conducts a log file deletion process that is vulnerable to manipulation. This flaw allows a non-administrative user to create a symbolic link that intercepts the deletion operation, escalating privileges to the SYSTEM level. This issue is related to CVE-2023-28892.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, with the potential to gain SYSTEM-level access.

Remediation

Users are advised to upgrade to Malwarebytes AdwCleaner version 8.7.0 or later.