CVE-2025-67905HIGH 8.7EPSS p3.4%

CVE-2025-67905CVE-2025-67905

Description

Malwarebytes AdwCleaner before v.8.7.0 runs as Administrator and performs an insecure log file delete operation in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link, a related issue to CVE-2023-28892. To exploit this, an attacker must create a file in a given folder path and intercept the application log file deletion flow.

Scoring

CVSS 3.18.7 (HIGH)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
EPSS0.14% probability of exploitation · percentile 3.4% · 2026-06-19T12:03:05Z
Published2026-02-17
Last modified2026-04-15

Underlying weaknesses· 1

CWE-269

References

  1. https://Malwarebytes.com
  2. https://www.malwarebytes.com/secure/cves/cve-2025-67905

1

TypeTargetConfidenceTier
WeaknessImproper Privilege Managementcwe-2690%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-6805
CVE
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
CVE
CVE-2026-42989
CVE
CVE-2025-11837
CVE
Microsoft Windows Storage Link Following Vulnerability
CVE
CVE-2026-50511
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.