What’s Vulnerable › Vulnerabilities

CVE-2023-29145

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-30 · updated 2026-06-17
• Weakness: CWE-640

Description

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.

Affected products

• Malwarebytes Endpoint Detection And Response: through 1.0.11
• Malwarebytes: through 1.0.14

References

• https://malwarebytes.com
• https://www.malwarebytes.com/secure/cves/cve-2023-29145
• https://malwarebytes.com
• https://www.malwarebytes.com/secure/cves/cve-2023-29145

Get alerted when CVE-2023-29145 or the next vulnerability affects your stack