CVE-2014-100039: mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (c...

Security readout for executives and security teams

This older Malwarebytes Anti-Exploit issue can let a local user crash the affected system or security component. The record points to a denial-of-service condition, not remote compromise or data theft. Business urgency depends on whether legacy Malwarebytes Anti-Exploit builds remain installed. Likely exposure is limited to systems running Malwarebytes Anti-Exploit versions earlier than 1.05.1.2014. The source bundle does not identify broader Malwarebytes products or supported platforms, so asset confirmation is required. Treat this as a legacy hygiene and availability risk. It is not evidenced as actively exploited, but affected systems could be crashed by local users. Prioritize confirmation and remediation if old Malwarebytes Anti-Exploit is still present. Mitigation focus: Inventory endpoints for Malwarebytes Anti-Exploit installations older than 1.05.1.2014.; Check Malwarebytes release history or support guidance for the fixed build path.; Update, retire, or remove vulnerable legacy installations where found..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.