VulnSocial

CVE-2026-12410Disclosure

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's data folder with elevated integrity.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-17: 1Technical Details · 2026-08-17: 108-17
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • SystemTek - Technology news website@SystemTek_UK
    Disclosure

    Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability (CVE-2026-12410) https://www.systemtek.co.uk/2026/08/gen-digital-ccleaner-link-following-local-privilege-escalation-vulnerability-cve-2026-12410/ via @SystemTek_UK

    Post summary

    The post links to an article announcing a new local privilege escalation vulnerability (CVE-2026-12410) in CCleaner, but provides no further technical, exploit, or mitigation details.

    00062333
    1.8K followersView on X

Explore more

Back to dashboard