PT-2025-37479 · Ge Digital · Ccleaner

Dong-Uk Kim · Published 2025-09-15 · Updated 2025-09-23 · CVE-2025-3025

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gen Digital CCleaner versions prior to 6.36.11508

Description A local user can gain SYSTEM privileges through insecure file delete operations within the cleaning feature on Windows.

Recommendations Update to version 6.36.11508 or later.

Fix

LPE

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2025-3025

ZDI-25-905

Affected Products

Ccleaner

References · 5

• https://zerodayinitiative.com/advisories/ZDI-25-905 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-3025 · Security Note
• https://twitter.com/CVEnew/status/1967575630473564301 · Twitter Post
• https://gendigital.com/us/en/contact-us/security-advisories · Note
• https://t.me/CVEtracker/32510 · Telegram Post