What is CVE-2025-3025?

CVE-2025-3025 is a high-severity vulnerability in Gen Digital Ccleaner, classified under Files or Directories Accessible to External Parties. CVSS score: 7.3/10. Published 2025-09-15.

How severe is CVE-2025-3025?

High severity. CVSS v3 base score is 7.3 out of 10.

Is CVE-2025-3025 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Gen Digital Ccleaner

CVE-2025-3025

Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects CCleaner: before < 6.36.11508.

EPSS: 0.001 (3.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Gen Digital Ccleaner — versions 6.33.11465

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

security@nortonlifelock.com

Frequently asked questions

What is CVE-2025-3025?: CVE-2025-3025 is a high-severity vulnerability in Gen Digital Ccleaner, classified under Files or Directories Accessible to External Parties. CVSS score: 7.3/10. Published 2025-09-15.
How severe is CVE-2025-3025?: High severity. CVSS v3 base score is 7.3 out of 10.
Is CVE-2025-3025 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.