local privilege escalation vulnerability in Bitdefender Total Security 27.0.46.231 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.
Configuration 1 (hide)
|
12 Jan 2026, 16:31
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Bitdefender
Bitdefender internet Security Bitdefender endpoint Security Tools Bitdefender total Security Bitdefender antivirus Bitdefender antivirus Plus |
|
| CPE | cpe:2.3:a:bitdefender:antivirus:*:*:*:*:free:*:*:* cpe:2.3:a:bitdefender:antivirus_plus:*:*:*:*:*:*:*:* cpe:2.3:a:bitdefender:total_security:*:*:*:*:*:*:*:* cpe:2.3:a:bitdefender:internet_security:*:*:*:*:*:*:*:* cpe:2.3:a:bitdefender:endpoint_security_tools:*:*:*:*:*:windows:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | () https://www.bitdefender.com/support/security-advisories/local-privilege-escalation-via-arbitrary-file-operation-in-bitdefender-atc-va-12590 - Vendor Advisory |
12 Dec 2025, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Published : 2025-12-10 10:16
Updated : 2026-01-12 16:31
NVD link : CVE-2025-7073
Mitre link : CVE-2025-7073
CVE.ORG link : CVE-2025-7073
JSON object : View
Improper Link Resolution Before File Access ('Link Following')