CVE-2026-12410

7.8 Élevée

Publiée le 05/08/2026 à 17:16 · Modifiée le 08/09/2026 à 21:12 · En attente d'analyse NVD · Source : security@nortonlifelock.com

Description

Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's data folder with elevated integrity.

Traduire en français

Produits concernés

Gen Digital CCleaner

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.8 Élevée	security@nortonlifelock.com	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-59

Références

https://www.gendigital.com/us/en/contact-us/security-advisories/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories