Security Advisory

CVE-2025-67905

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-17 00:00:00

Last updated 2026-02-17 18:55:56

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Malwarebytes AdwCleaner before v.8.7.0 runs as Administrator and performs an insecure log file delete operation in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link, a related issue to CVE-2023-28892. To exploit this, an attacker must create a file in a given folder path and intercept the application log file deletion flow.

← Browse all CVEs View on cve.org ↗