A local privilege escalation vulnerability in Bitdefender Total Security 27.0.46.231 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.
References
Configurations
Configuration 1 (hide)
|
History
12 Jan 2026, 16:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.bitdefender.com/support/security-advisories/local-privilege-escalation-via-arbitrary-file-operation-in-bitdefender-atc-va-12590 - Vendor Advisory | |
| First Time |
Bitdefender internet Security
Bitdefender total Security Bitdefender antivirus Bitdefender antivirus Plus Bitdefender endpoint Security Tools Bitdefender |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:a:bitdefender:internet_security:*:*:*:*:*:*:*:* cpe:2.3:a:bitdefender:antivirus:*:*:*:*:free:*:*:* cpe:2.3:a:bitdefender:total_security:*:*:*:*:*:*:*:* cpe:2.3:a:bitdefender:antivirus_plus:*:*:*:*:*:*:*:* cpe:2.3:a:bitdefender:endpoint_security_tools:*:*:*:*:*:windows:*:* |
10 Dec 2025, 10:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-10 10:16
Updated : 2026-01-12 16:31
NVD link : CVE-2025-7073
Mitre link : CVE-2025-7073
CVE.ORG link : CVE-2025-7073
JSON object : View
Products Affected
bitdefender
- internet_security
- antivirus_plus
- endpoint_security_tools
- antivirus
- total_security
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')