CVE-2018-6593

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privileges.

• CWE-732

• https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-6593/Malwarefox_privescl_0.cThird Party Advisory
• https://www.exploit-db.com/exploits/43973/Exploit, Third Party Advisory, VDB Entry
• https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-6593/Malwarefox_privescl_0.cThird Party Advisory
• https://www.exploit-db.com/exploits/43973/Exploit, Third Party Advisory, VDB Entry

Published

Feb 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6587CA API Developer Portal 3.5 up to and including 3.5 CR6 has …6.1
• CVE-2018-6588CA API Developer Portal 3.5 up to and including 3.5 CR5 has …6.1
• CVE-2018-6589CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x p…7.5
• CVE-2018-6590CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1,…6.1
• CVE-2018-6591Converse.js and Inverse.js through 3.3 allow remote attacker…
• CVE-2018-6592Unisys Stealth 3.3 Windows endpoints before 3.3.016.1 allow …
• CVE-2018-6594lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 ge…
• CVE-2018-6596webhooks/base.py in Anymail (aka django-anymail) before 1.2.…
• CVE-2018-6597The Alcatel A30 device with a build fingerprint of TCL/5046G…
• CVE-2018-6598An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:…
• CVE-2018-6599An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:…
• CVE-2018-6603Promise Technology WebPam Pro-E devices allow remote attacke…