CVE-2025-32780
BleachBit for Windows Has DLL Untrusted Path Vulnerability
概要
BleachBit for Windows Has DLL Untrusted Path Vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.6.2 is vulnerable to a DLL Hijacking vulnerability. By placing a malicious DLL with the name uuid.dll in the folder C:\Users\AppData\Local\Microsoft\WindowsApps, an attacker can execute arbitrary code every time BleachBit is run. This issue has been patched in version 4.9.0.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com