CVE-2018-6606

CVE Enrichment

CVSS: 7.8 HIGH
EPSS: 1.19%
EPSS Percentile: 67.41%
CISA KEV: Not listed

Description

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privileges.

Technical Details

CVSS Version: 3.0
CNA / NVD Source: cve@mitre.org
Published: 04-Feb-2018 08:29
Last Modified: 17-Jun-2026 09:02
EPSS Date: 2026-10-20
CWE: CWE-732

CVSS Vector


            CVSS:3.0                            AV:L /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

malwarefox / antimalware
Version / affected range: 2.74.0.150
cpe:2.3:a:malwarefox:antimalware:2.74.0.150:*:*:*:*:*:*:*

References

Last enrichment sync: 21-Oct-2026 03:58
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

exploits CVE-2018-6606, a loader Intezer’s 2026 AI SOC Report Finds Threats Hidden in Low-Severity Alerts

CVE (2)

Malware (9)

People (2)

Threat Actors (6)

MITRE ATT&CK (12)

Vendors (6)

Products (9)

Tools (8)

Industries (3)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.