This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-12410 | BDVDB-2026-355334 Detail

Gen DigitalCCleaner

Description#

Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's data folder with elevated integrity.

Impact#

Successful exploitation allows a local, low-privileged attacker to delete arbitrary files/folders with SYSTEM integrity by replacing the uninstall target folder with a symlink/junction, ultimately achieving local privilege escalation.

Weaknesses#

  • CWE-59 Improper Link Resolution Before File Access ('Link Following')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.