ZDI-25-905: Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Gen Digital CCleaner. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Some interaction on the part of an administrator is additionally required. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2025-3025.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-905?
The ZDI-25-905 vulnerability is classified as a privilege escalation vulnerability.
How do I fix ZDI-25-905?
To fix ZDI-25-905, users should update to the latest version of Gen Digital CCleaner that addresses this vulnerability.
Who is affected by ZDI-25-905?
Users of Gen Digital CCleaner are affected by the ZDI-25-905 vulnerability.
What type of attack is possible with ZDI-25-905?
ZDI-25-905 allows local attackers to escalate privileges on the affected system.
What is required to exploit ZDI-25-905?
An attacker must first obtain the ability to execute low-privileged code on the target system to exploit ZDI-25-905.