PT-2026-50921 · Malwarebytes · Malwarebytes

Hejap Zairy · Published 2026-06-19 · Updated 2026-06-19 · CVE-2022-50971

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Malwarebytes version 4.5

Description An unquoted service path issue exists in the MBAMService executable. This allows local attackers to escalate privileges by injecting malicious code into the system root path. Attackers can place executable files in unquoted path directories that execute with LocalSystem privileges during service startup or system reboot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2022-50971

Affected Products

Malwarebytes

References · 7

• 🔥 https://exploit-db.com/exploits/50806 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50971 · Security Note
• https://twitter.com/CVEnew/status/2068015566388867276 · Twitter Post
• https://malwarebytes.com/mwb-download · Note
• https://vulncheck.com/advisories/malwarebytes-unquoted-service-path-privilege-escalation · Note
• https://malwarebytes.com · Note
• https://twitter.com/infoflowcloud/status/2068016218691277186 · Twitter Post