Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)
Priority LOW 32CWE-59Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue affects Total Security: before 27.0.58.315; Internet Security: before 27.0.58.315.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00149 4th percentileScored 2026-11-07
Fix Fixed Total Security (Bitdefender): 27.0.58.315Internet Security (Bitdefender): 27.0.58.315
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Bitdefender | Total Security | before 27.0.58.315 | 27.0.58.315 | Patch available | CNA |
| Bitdefender | Internet Security | before 27.0.58.315 | 27.0.58.315 | Patch available | CNA |
- Total Security VendorBitdefender Affected before 27.0.58.315 Fixed in 27.0.58.315 Patch available CNA
- Internet Security VendorBitdefender Affected before 27.0.58.315 Fixed in 27.0.58.315 Patch available CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:bitdefender:internet_security:*:*:*:*:*:*:*:* | before 27.0.58.315 | Vulnerable | Bitdefender |
| cpe:2.3:a:bitdefender:total_security:*:*:*:*:*:*:*:* | before 27.0.58.315 | Vulnerable | Bitdefender |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
- cpe:2.3:a:bitdefender:internet_security:*:*:*:*:*:*:*:* Versions before 27.0.58.315 Vulnerable ·Bitdefender
- cpe:2.3:a:bitdefender:total_security:*:*:*:*:*:*:*:* Versions before 27.0.58.315 Vulnerable ·Bitdefender
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
Remediation
- Fix · CNA Total Security (Bitdefender) Fixed in 27.0.58.315
- Fix · CNA Internet Security (Bitdefender) Fixed in 27.0.58.315
Timeline
- 2026-10-02 Threatist record created from CVE-2026-6851
- 2026-10-03 Alias added: GHSA-f943-xhh7-7c5g
References
More Bitdefender Internet Security vulnerabilities
- TI-2007-05541 Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via… CVSS 3.1CRITICAL 9.8
- TI-2009-00808 Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows… CVSS 2.0MEDIUM 4.3
- TI-2025-06435 Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security CVSS 4.0HIGH 8.8
- TI-2020-06526 Process Control vulnerability in Bitdefender Antivirus Plus CVSS 3.1HIGH 8.2
- TI-2023-05659 Local privilege escalation in Bitdefender Total Security (VA-11168) CVSS 3.1HIGH 7.8
- TI-2022-00282 Improper Quoting Path Issue in Bitdefender Total Security CVSS 3.1HIGH 7.8
Sources
- CVE-2026-6851 · CVE Program
- CVE-2026-6851 · NVD
- FIRST EPSS
- GHSA-f943-xhh7-7c5g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences