CVE-2026-6851CWE-59

CVE-2026-6851

High · published July 14, 2026

CVSS v3.1
7.0
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links.

This issue affects Total Security: before 27.0.58.315; Internet Security: before 27.0.58.315.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00149 · 3.8th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-07-14T12:16Z
Affected products (2)
ProductVersionsFixed in
bitdefender/internet_security< 27.0.58.31527.0.58.315
bitdefender/total_security< 27.0.58.31527.0.58.315
References (1)
https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-via-link-following-va-13681 · [email protected]
EPSS history
Timeline
  • 14 JUL 07:11Z
    Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)
    cvelistv5