Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security
Vulnerability Description
A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7073
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Filip Dragovic (@filip_dragovic)
More from Bitdefender
View All →Affected Vendor
Bitdefender
View all reports →