CVE-2018-5276

CVE-2018-5276 describes a denial-of-service vulnerability in Malwarebytes Premium 3.3.1.2183, specifically within the FARFLT.SYS driver, due to insufficient input validation for IOCtl 0x9c40e018. This flaw could allow a local attacker to trigger a Blue Screen of Death (BSOD) or potentially achieve other unspecified impacts. The vulnerability carries a high CVSSv3 score of 7.8, indicating a significant risk. It is a local attack (AV:L) with low attack complexity (AC:L) and requires low privileges (PR:L), making it relatively easy for an authenticated local user to exploit. The potential impact includes high confidentiality, integrity, and availability compromise (C:H/I:H/A:H). Despite its severity, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage. The vendor also reported an inability to reproduce the issue across various Windows operating systems.