CVE-2025-32780
BleachBit for Windows Has DLL Untrusted Path Vulnerability
Summary
BleachBit for Windows Has DLL Untrusted Path Vulnerability
Original description
The description as published by the source.
BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.6.2 is vulnerable to a DLL Hijacking vulnerability. By placing a malicious DLL with the name uuid.dll in the folder C:\Users\AppData\Local\Microsoft\WindowsApps, an attacker can execute arbitrary code every time BleachBit is run. This issue has been patched in version 4.9.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com