← CVE Intelligence

CVE-2026-6851

Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681) PUBLISHED

Description (CNA)

An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue affects Total Security: before 27.0.58.315; Internet Security: before 27.0.58.315.

Affected (CNA)

Vendor / productVersions
Bitdefender / Total Securityaffected 0 before 27.0.58.315
Bitdefender / Internet Securityaffected 0 before 27.0.58.315

CWE

CWE-59

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.