CVE-2025-7073
A local privilege escalation vulnerability in Bitdefender Total Security 27.0.46.231 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.
| Software | From | Fixed in |
|---|---|---|
| bitdefender / antivirus | - | 30.0.25.77 |
| bitdefender / antivirus_plus | - | 27.10.45.497 |
| bitdefender / endpoint_security_tools | - | 7.9.20.515 |
| bitdefender / internet_security | - | 27.10.45.497 |
| bitdefender / total_security | - | 27.10.45.497 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime