{"id":"CVE-2025-3025","aliases":["EUVD-2025-29181","GHSA-5gq3-ccfh-828v"],"status":"published","title":"CCleaner Link Following Local Privilege Escalation Vulnerability","description":"Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before \u003c 6.36.11508.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00145,"percentile":0.03789,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-552"],"published":"2025-09-15T12:20:21Z","modified":"2026-10-23T22:10:00Z","products":[{"vendor":"gen digital","product":"ccleaner"},{"vendor":"piriform","product":"ccleaner"}],"references":[{"url":"https://www.gendigital.com/us/en/contact-us/security-advisories/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3025"},{"url":"https://www.gendigital.com/us/en/contact-us/security-advisories"},{"url":"https://github.com/advisories/GHSA-5gq3-ccfh-828v"}],"sources":{"cve":[{"id":"CVE-2025-3025","title":"CCleaner Link Following Local Privilege Escalation Vulnerability","description":"Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before \u003c 6.36.11508.","status":"published","published":"2025-09-15T12:20:21.094Z","modified":"2026-02-26T17:48:37.651Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:32:39.378527Z"}],"euvd":[{"id":"EUVD-2025-29181","description":"Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before \u003c 6.36.11508.","status":"published","published":"2025-09-15T12:20:21Z","modified":"2026-02-26T17:48:37Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:21.697838Z"}],"ghsa":[{"id":"GHSA-5gq3-ccfh-828v","title":"Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on...","description":"Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before \u003c 6.36.11508.","status":"published","published":"2025-09-15T15:31:21Z","modified":"2025-09-15T15:31:30Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T15:03:37.061484Z"}],"nvd":[{"id":"CVE-2025-3025","description":"Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before \u003c 6.36.11508.","status":"published","published":"2025-09-15T13:15:36.04Z","modified":"2026-10-23T22:10:00.16Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:11:29.650057Z"}]}}