Back to Database
Status published
Low
CVE-2014-100039
mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to...
Vulnerability Description
mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (crash) via a crafted size in an unspecified IOCTL call, which triggers an out-of-bounds read. NOTE: some of these details are obtained from third party information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-100039
Credits & Attribution
No credits recorded in the NVD database.
More from malwarebytes
View All →CVE-2022-25150
In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed...
High
7.8
CVE-2020-28641
In Malwarebytes Free 4.1.0.56, a symbolic link may be used...
High
7.1
CVE-2020-25533
An issue was discovered in Malwarebytes before 4.0 on macOS....
High
7
CVE-2020-11507
An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could...
High
7.8
CVE-2019-19929
An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner before 8.0.1...
High
7.8
Affected Vendor
malwarebytes
View all reports →Affected Software
malwarebytes anti-exploit
Vulnerable Versions:
0
Timeline
Official Publish:
January 13th, 2015
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.