What’s Vulnerable › Vulnerabilities

CVE-2018-6593

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-02-03 · updated 2026-06-17
• Weakness: CWE-732

Description

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privileges.

Affected products

• Malwarefox Antimalware: 2.74.0.150

References

• https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-6593/Malwarefox_privescl_0.c
• https://www.exploit-db.com/exploits/43973/
• https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-6593/Malwarefox_privescl_0.c
• https://www.exploit-db.com/exploits/43973/

Get alerted when CVE-2018-6593 or the next vulnerability affects your stack