« Back to list

CVE-2015-3999

Status: ModifiedLow (2.1)—

Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Piriform — Ccleaner

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2015-3999",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-05-20T18:59:07.200",
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2015/May/72",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/74714",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2015/May/72",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/74714",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space."
    },
    {
      "lang": "es",
      "value": "Piriform CCleaner 3.26.0.1988 hasta 5.02.5101 escribe los nombres de ficheros en el disco cuando sobrescribe ficheros, lo que permite a usuarios locales obtener información sensible mediante la búsqueda en espacios de disco no asignados."
    }
  ],
  "lastModified": "2026-06-17T00:26:36.450",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:3.26.1888:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3DAC1AA-3F82-45C7-A2B6-29FB14AE0FE9"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:3.27.1900:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D840239F-0C9F-4586-83C5-AB02958DD93B"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:3.28.1913:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "349A181E-0B45-4B8E-9A8D-CA4773B6E307"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.00.4064:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3998EF54-775C-4ECD-922C-1EAB3485DDF5"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.01.4093:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D3358F5-47FE-4552-A0E3-CC92F6EA6784"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.02.4115:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDCA3BC8-14C3-4506-94E5-FE6E998196D0"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.03.4151:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B71303B7-544F-4300-A531-EA6991111B88"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.04.4197:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74C69B5C-7586-4A4F-919C-75B6B166C3EB"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.05.4250:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5C9F4E8-1173-4513-B379-9438630D1193"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.06.4324:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD819CE5-0E05-4C32-AC10-34CFBC2D0FC9"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.07.4369:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2ABE6FE-AC6F-4DD2-B092-4F91E4E49FC5"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.08.4428:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65EE2FAE-71E9-4230-8496-E74412370B24"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.09.4471:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEF67437-25C5-48AE-91D0-E4933E86AF02"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.10.4570:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13427C09-CFFB-47E5-84AD-154EE397A201"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.11.4619:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F1037F48-8A62-4832-86E7-001A14D811E1"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.12.4657:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C869D71-62AB-42E9-BBB1-8868802685E5"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.13.4693:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E82D53EE-0535-4055-BB0C-025B00D352FF"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.14.4707:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6385F76D-C122-4EC3-9364-3282915E6129"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.15.4725:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E113BB9A-72C3-4B1E-9FB9-006B7871F806"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.16.4763:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08CC2F28-22F4-477A-B4AF-14B11CF3EE45"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.17.4808:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24B1B936-2F24-4088-8CBD-5C24F5C47625"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.18.4844:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D4318DC-A9E4-4D2F-9698-E72DD005122F"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:4.19.4867:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53889D64-47B6-466B-8E4F-20EF376A4730"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:5.00.5050:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9348C7A-76D9-4B30-AEE7-F60524E1D839"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:5.01.5075:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DB724ED-7EA8-407A-851C-CDAC8A61519C"
            },
            {
              "criteria": "cpe:2.3:a:piriform:ccleaner:5.02.5101:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E28CC9B4-040D-4818-A651-2656953D337A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}