Vulnerabilities (CVE)

Filtered by vendor Malwarebytes Subscribe
Filtered by product Endpoint Detection And Response
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-29147 1 Malwarebytes 2 Endpoint Detection And Response, Malwarebytes 2023-12-10 N/A 5.5 MEDIUM
In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier.
CVE-2023-29145 1 Malwarebytes 2 Endpoint Detection And Response, Malwarebytes 2023-12-10 N/A 7.8 HIGH
The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.