CVE-2023-26088: 
Homebrew vulnerability analysis and mitigation

CVE-2023-26088 affects Malwarebytes versions before 4.5.23, discovered and disclosed in March 2023. The vulnerability exists in the local quarantine system of Malwarebytes for Windows, where a symbolic link can be exploited to delete arbitrary files on the system (NVD, Malwarebytes Advisory).

The vulnerability is classified with a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. It is categorized under CWE-59 (Improper Link Resolution Before File Access) and requires local access to exploit. The vulnerability specifically involves the local quarantine system's handling of symbolic links (NVD).

The vulnerability can lead to arbitrary file deletion on the affected system and potential privilege escalation in certain scenarios. This gives attackers with local access the ability to delete any file on the system by exploiting the quarantine system's symbolic link handling (Malwarebytes Advisory).

The recommended mitigation is to upgrade affected endpoints to Malwarebytes version 4.5.23 or later, which contains the patch for this vulnerability (Release Notes).