Gen Digital CCleaner vulnerabilities

Latest Gen Digital CCleaner CVEs

Newest publication first

1. CVE-2026-12410 CCleaner local privilege escalation via link following on uninstall

   Published 2026-08-05

   High·CVSS 7.8 EPSS 0.17%

   Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the...

2. CVE-2025-3025 CCleaner Link Following Local Privilege Escalation Vulnerability

   Published 2025-09-15

   High·CVSS 7.3 EPSS 0.15%

   Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before < 6.36.11508...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.