CVE-2025-32780
BleachBit for Windows Has DLL Untrusted Path Vulnerability
Résumé
BleachBit for Windows Has DLL Untrusted Path Vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.6.2 is vulnerable to a DLL Hijacking vulnerability. By placing a malicious DLL with the name uuid.dll in the folder C:\Users\AppData\Local\Microsoft\WindowsApps, an attacker can execute arbitrary code every time BleachBit is run. This issue has been patched in version 4.9.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com