VDB
CVE-2023-47113
CVE-2023-47113
PUBLISHED
CVSS 7.300000190734863 HIGH
BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been patched in version 4.5.0.
EPSS 0.25% · 16.1th percentile
Risk Scores
CVSS 3.1
7.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.25%
16.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| bleachbit | bleachbit | 0 |
| bleachbit | bleachbit | 0, <= 4.4.2 |
Timeline
- Nov 8, 2023 CVE Published
- Nov 9, 2023 EPSS Score
- Dec 10, 2023 EPSS Score
- Jan 10, 2024 EPSS Score
- Feb 10, 2024 EPSS Score
- Mar 12, 2024 EPSS Score
- Apr 12, 2024 EPSS Score
- May 13, 2024 EPSS Score
- Jun 13, 2024 EPSS Score
- Jul 14, 2024 EPSS Score
- Aug 14, 2024 EPSS Score
- Sep 14, 2024 EPSS Score