What’s Vulnerable › Vulnerabilities

CVE-2018-6606

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-02-04 · updated 2026-06-17
• Weakness: CWE-732

Description

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privileges.

Affected products

• Malwarefox Antimalware: 2.74.0.150

References

• https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-6606/Malwarefox_privescl_1.c
• https://www.exploit-db.com/exploits/43987/
• https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-6606/Malwarefox_privescl_1.c
• https://www.exploit-db.com/exploits/43987/

Get alerted when CVE-2018-6606 or the next vulnerability affects your stack