CVE-2023-29145

—

CVSS 3.1

7.8 high

EPSS

<1%p24

Published

Jun 30, 2023 (Jun 30, 2023)

Modified

Jun 17, 2026

Description

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.

Vendors: malwarebytes
Products: endpoint detection and response, malwarebytes
Weakness: CWE-640
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.