CVE-2023-43686

MediumCVSS 6.2

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

In Malwarebytes 4.x and 5.x (and Nebula from 2020-10-21), a large number of Firefox preference files can cause the parser to ignore other browser configuration files, leading to denial of service.

Risk Assessment

An attacker could cause Malwarebytes to fail to properly analyze browser configurations, potentially leading to bypassed protection or crashes.

Recommendation

Update Malwarebytes to the latest patched version.

Other vulnerabilities in Malwarebytes

CVE-2023-43688High
A heap buffer overflow exists in various buffer encryption utilities in Malwarebytes 4.x and 5.x (and Nebula from 2020-10-21 onward).

Original NVD description (English source)

An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). A large number of Firefox preference files can cause the parser to ignore other browser configuration files, leading to a denial of service.