Description
An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links.
This issue affects Total Security: before 27.0.58.315; Internet Security: before 27.0.58.315.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bitdefender | Total Security | < 27.0.58.315 | 27.0.58.315 |
| Bitdefender | Internet Security | < 27.0.58.315 | 27.0.58.315 |
Advisories 1
- WID-SEC-2026-2361 Bitdefender Internet und Total Security: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jul 23, 2026