Lucene search
+L

70 matches found

NVD
NVD
added 2026/08/05 3:16 p.m.13 views

CVE-2026-12410

Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's dat...

7.8CVSS0.00127EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/05 2:14 p.m.32 views

CVE-2026-12410 CCleaner local privilege escalation via link following on uninstall

Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's dat...

7.8CVSS0.00127EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/05 2:14 p.m.12 views

EUVD-2026-53387

Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's dat...

7.8CVSS5.5AI score0.00127EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 2:14 p.m.56 views

CVE-2026-12410

CVE-2026-12410 affects CCleaner on Windows, specifically the Uninstaller component prior to version 7.10.1464. The issue is a local privilege escalation where a symlink/junction created during uninstallation can be followed by CCleaner when deleting the application data folder, allowing an attack...

7.8CVSS5.5AI score0.00127EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/05 12:00 a.m.9 views

PT-2026-68174

Name of the Vulnerable Software and Affected Versions CCleaner versions prior to 7.10.1464 Description A link following issue exists in the Uninstaller component on Windows. A local, low-privileged attacker can escalate privileges to SYSTEM by creating a symlink or junction during the application...

7.8CVSS5.3AI score0.00127EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/10/10 1:31 a.m.9 views

CVE-2017-20201

CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...

9.3CVSS7AI score0.00494EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/08 10:15 p.m.13 views

CVE-2017-20201

CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...

9.3CVSS0.00494EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2025/10/08 10:04 p.m.5 views

CVE-2017-20201 CCleaner v5.33.6162 & CCleaner Cloud v1.07.3191 Malicious Backdoor Supply Chain Compromise

CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...

9.3CVSS6.7AI score0.00494EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/10/08 10:04 p.m.20 views

CVE-2017-20201 CCleaner v5.33.6162 & CCleaner Cloud v1.07.3191 Malicious Backdoor Supply Chain Compromise

CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...

9.3CVSS0.00494EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/08 10:04 p.m.7 views

EUVD-2025-33278

CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...

9.3CVSS6.5AI score0.00494EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/10/08 12:00 a.m.11 views

CCleaner和CCleaner Cloud 安全漏洞

CCleaner and CCleaner Cloud are both products of CCleaner, a UK-based company.CCleaner is a system cleaner and optimizer.CCleaner Cloud is a cloud-based system cleaner and optimizer. A security vulnerability exists in CCleaner version v5.33.6162 and CCleaner Cloud version v1.07.3191, which...

9.3CVSS6.6AI score0.00494EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/10/08 12:00 a.m.14 views

PT-2025-41312

Name of the Vulnerable Software and Affected Versions CCleaner versions 5.33.6162 CCleaner Cloud versions 1.07.3191 Description CCleaner and CCleaner Cloud contained a malicious pre-entry-point loader that redirects execution to a custom loader. This loader decodes an embedded blob into shellcode...

9.3CVSS6.9AI score0.00494EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2015-4029

Malware in sbrugna...

2.1CVSS6.4AI score0.00524EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2025-29181

Malicious code in bioql PyPI...

7.3CVSS6.5AI score0.00142EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2025/09/23 12:00 a.m.14 views

Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Gen Digital CCleaner. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Some interaction on the part of an administrato...

7.3CVSS7.4AI score0.00142EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/17 12:49 p.m.13 views

CVE-2025-3025

Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before 6.36.11508...

7.3CVSS6.9AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/15 1:15 p.m.7 views

CVE-2025-3025

Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before 6.36.11508...

7.3CVSS0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/15 12:20 p.m.17 views

CVE-2025-3025 CCleaner Link Following Local Privilege Escalation Vulnerability

Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before 6.36.11508...

7.3CVSS0.00142EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/15 12:20 p.m.3 views

CVE-2025-3025 CCleaner Link Following Local Privilege Escalation Vulnerability

Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before 6.36.11508...

7.3CVSS6.5AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/15 12:20 p.m.18 views

CVE-2025-3025

Gen Digital CCleaner for Windows is affected by CVE-2025-3025 through insecure file deletion in the Cleaning feature. The root cause is unsafe deletion operations that enable a local user to escalate to SYSTEM privileges (reported on CCleaner v6.33.11465; affected before v6.36.11508). Exploitatio...

7.3CVSS6.5AI score0.00142EPSS
SaveExploits0References1
Rows per page
Query Builder