Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-7073

Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Bitdefender

Description

A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bitdefender Total Security

Default version status: unaffected

  • 0 to < 27.0.47.241affected

Bitdefender Internet Security

Default version status: unaffected

  • 0 to < 27.0.47.241affected

Bitdefender Antivirus Plus

Default version status: unaffected

  • 0 to < 27.0.47.241affected

References