Vulnerabilities CVE-2026-12410

CVE-2026-12410

High

Open

TLP:CLEAR

CCleaner local privilege escalation via link following on uninstall

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's data folder with elevated integrity.

Details

CVSS Score: 7.8
EPSS Score ⓘ: 0.13%

2.8th percentile
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Aug 5, 2026
Last Modified: Aug 5, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.