CVE-2023-47113 HIGH

CVE-2023-47113: DLL Search Order Hijacking vulnerability in BleachBit for Windows

Vendor Bleachbit
Product bleachbit
Weakness CWE-427
Published November 8, 2023
Last update September 6, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been patched in version 4.5.0.

Key dates

02Disclosure timeline

November 8, 2023 CVE published
September 6, 2024 Record updated