CVE-2025-67905 – Malwarebytes
AdwCleaner – Privilege Escalation

SUMMARY:

Malwarebytes AdwCleaner before 8.7.0 runs as Administrator and performs an insecure file delete operation in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link.

AFFECTED VERSIONS

  • Malwarebytes AdwCleaner < 8.7.0

PATCHED VERSIONS

  • >=8.7.0

MITIGATION ADVICE

We recommend upgrading the affected endpoints to the patched version.

DETAILS

CWECVS 3.xVector
CWE-269: Improper Privilege Management8.6 HighLocal

RECOGNITION

Bocheng Xiang(@Crispr) From FDU

REFERENCES

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67905