DLL Hijacking Vulnerability in BleachBit for Windows

CVE-2025-32780

What is CVE-2025-32780?

BleachBit for Windows, a utility for cleaning files to free up disk space and maintain user privacy, is susceptible to a vulnerability that enables DLL Hijacking. This flaw allows an attacker to place a malicious DLL file named 'uuid.dll' in the user's local application data directory (C:\Users<username>\AppData\Local\Microsoft\WindowsApps). When BleachBit is executed, the malicious code can be run, potentially compromising the system. Users are strongly advised to update to version 4.9.0 or later to mitigate this threat and safeguard their systems.

References