<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: malwarefox</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2021-31728: Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged </title><link>https://patchthecve.com/cve/CVE-2021-31728.html</link><guid>https://patchthecve.com/cve/CVE-2021-31728.html</guid><pubDate>Wed, 17 Jun 2026 03:52:11 +0000</pubDate><description>HIGH 7.8: Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to \.\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook wit</description></item><item><title>CVE-2021-31727: Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL&#x27;s 0x80002014</title><link>https://patchthecve.com/cve/CVE-2021-31727.html</link><guid>https://patchthecve.com/cve/CVE-2021-31727.html</guid><pubDate>Wed, 17 Jun 2026 03:52:10 +0000</pubDate><description>HIGH 7.8: Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL&#x27;s 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to \.\ZemanaAntiMalware, register with the driver using IOCTL 0x8000201</description></item><item><title>CVE-2018-6606: An issue was discovered in MalwareFox AntiMalware 2.74.0.150</title><link>https://patchthecve.com/cve/CVE-2018-6606.html</link><guid>https://patchthecve.com/cve/CVE-2018-6606.html</guid><pubDate>Wed, 17 Jun 2026 02:02:05 +0000</pubDate><description>HIGH 7.8: An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privileges.</description></item><item><title>CVE-2018-6593: An issue was discovered in MalwareFox AntiMalware 2.74.0.150</title><link>https://patchthecve.com/cve/CVE-2018-6593.html</link><guid>https://patchthecve.com/cve/CVE-2018-6593.html</guid><pubDate>Wed, 17 Jun 2026 02:02:04 +0000</pubDate><description>HIGH 7.8: An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privi</description></item><item><title>CVE-2018-5714: In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local users to cause a denial of servi</title><link>https://patchthecve.com/cve/CVE-2018-5714.html</link><guid>https://patchthecve.com/cve/CVE-2018-5714.html</guid><pubDate>Wed, 17 Jun 2026 02:00:38 +0000</pubDate><description>HIGH 7.8: In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002054.</description></item><item><title>CVE-2018-5713: In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local users to cause a denial of servi</title><link>https://patchthecve.com/cve/CVE-2018-5713.html</link><guid>https://patchthecve.com/cve/CVE-2018-5713.html</guid><pubDate>Wed, 17 Jun 2026 02:00:38 +0000</pubDate><description>HIGH 7.8: In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002010.</description></item></channel></rss>