ZDI-CAN-26474: ZDI-25-905: Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Gen Digital CCleaner. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Some interaction on the part of an administrator is additionally required. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2025-3025.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-26474?
The ZDI-CAN-26474 vulnerability has a high severity rating due to its potential for privilege escalation.
How do I fix ZDI-CAN-26474?
To resolve ZDI-CAN-26474, update to the latest version of Gen Digital CCleaner that includes patches addressing the vulnerability.
Who is affected by ZDI-CAN-26474?
Users of Gen Digital CCleaner are affected by the ZDI-CAN-26474 vulnerability.
Can ZDI-CAN-26474 be exploited remotely?
No, ZDI-CAN-26474 requires local access to exploit the vulnerability.
What type of vulnerability is ZDI-CAN-26474?
ZDI-CAN-26474 is categorized as a privilege escalation vulnerability.