Vulnerability Details CVE-2026-6851
An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links.
This issue affects Total Security: before 27.0.58.315; Internet Security: before 27.0.58.315.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 2.3%
CVSS Severity
CVSS v3 Score 7.0
Products affected by CVE-2026-6851
-
cpe:2.3:a:bitdefender:internet_security:-
-
cpe:2.3:a:bitdefender:internet_security:12.0
-
cpe:2.3:a:bitdefender:internet_security:23.0.24.120
-
cpe:2.3:a:bitdefender:internet_security:24.0.26.136
-
cpe:2.3:a:bitdefender:internet_security:25.0.7.29
-
cpe:2.3:a:bitdefender:internet_security:26.0.10.45
-
cpe:2.3:a:bitdefender:internet_security:26.0.3.29
-
cpe:2.3:a:bitdefender:internet_security:27.0.25.114
-
cpe:2.3:a:bitdefender:total_security:-
-
cpe:2.3:a:bitdefender:total_security:12.0
-
cpe:2.3:a:bitdefender:total_security:21.0.24.62
-
cpe:2.3:a:bitdefender:total_security:23.0.24.120
-
cpe:2.3:a:bitdefender:total_security:24.0.26.136
-
cpe:2.3:a:bitdefender:total_security:25.0.7.29
-
cpe:2.3:a:bitdefender:total_security:26.0.10.45
-
cpe:2.3:a:bitdefender:total_security:26.0.3.29
-
cpe:2.3:a:bitdefender:total_security:27.0.25.114
-
cpe:2.3:a:bitdefender:total_security:27.0.25.115
-
cpe:2.3:a:bitdefender:total_security:7.2.1.65
-
cpe:2.3:o:microsoft:windows:-