Bleachbit vulnerabilities
We track 3 vulnerabilities in Bleachbit products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 21, 2026.
Latest Bleachbit vulnerabilities
- 7.8 High severity
bleachbit: Time-of-check Time-of-use (TOCTOU) Race Condition
BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent directory before deletion. A local unprivileged user can replace that directory with a Windows junction
- 7.3 High severity
bleachbit: Uncontrolled Search Path Element
BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.6.2 is vulnerable to a DLL Hijacking vulnerability. By placing a malicious DLL with the name uuid.dll in the folder C:\Users\<username>\AppData\Local\Micro
- 7.3 High severity
bleachbit: Uncontrolled Search Path Element
BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of Bleach