VULNERABILITY INTELLIGENCE

CVE-2026-6851

CVSS score7 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-07-14
Last modified2026-08-12
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue affects Total Security: before 27.0.58.315; Internet Security: before 27.0.58.315.

Weakness classification

  • cve-requests@bitdefender.com: CWE-59

Primary references