← Database

CVE-2026-6851

HIGH CVSS: 7.0 Published: 2026-07-14 Modified: 2026-08-12

Description

An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue affects Total Security: before 27.0.58.315; Internet Security: before 27.0.58.315.

Affected Platforms

Bitdefender Total SecurityMicrosoft WindowsBitdefender Internet Security

Weakness Type

CWE-59

References