CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...

CVE-2025-21420

CVE-2025-21420 is evidenced by PoCs showing a Disk Cleanup Tool (cleanmgr.exe) elevation via a DLL sideload approach. The GitHub PoCs demonstrate loading dokan1.dll/dokannp1.dll to trigger arbitrary code paths, with the exploit chain listing SetProcessMitigationPolicy (ProcessRedirectionTrustPoli...

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

...

CVE-2025-21420: Improper Link Resolution Before File Access

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...

PT-2025-6338

Name of the Vulnerable Software and Affected Versions Windows Disk Cleanup Tool affected versions not specified Description A critical issue exists within the Windows Disk Cleanup Tool cleanmgr.exe that allows for privilege escalation to SYSTEM privileges. The flaw involves errors in handling...