CVE-2018-6593

HIGH 7.8CVE-2018-6593 · Published 03/02/2018 · updated 17/06/2026

In short

CVE-2018-6593 is a HIGH (CVSS 7.8) vulnerability affecting antimalware (malwarefox).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
antimalware malwarefox	`= 2.74.0.150`	No fix yet

Description

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privileges.

References

SouhailHammou/Exploits · Third Party Advisory
exploit-db.com/exploits/43973 · Exploit

More vulnerabilities in antimalware

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free