high7.0
CVE-2026-6851
An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet …
Impact
An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue affects Total Security: before 27.0.58.315; Internet Security: before 27.0.58.315.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bitdefender | Internet Security | before 27.0.58.315 |
| Bitdefender | Total Security | before 27.0.58.315 |