Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-6851

Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)

Description

An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue affects Total Security: before 27.0.58.315; Internet Security: before 27.0.58.315.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bitdefender Total Security

Default version status: unaffected

  • 0 to < 27.0.58.315affected

Bitdefender Internet Security

Default version status: unaffected

  • 0 to < 27.0.58.315affected

References