ZDI-CAN-28703: ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-6851.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-28703?
The severity of ZDI-CAN-28703 is rated at 7.3, indicating a significant risk for local privilege escalation.
How do I fix ZDI-CAN-28703?
To address ZDI-CAN-28703, ensure that you update Bitdefender Total Security to the latest version provided by the vendor.
What type of vulnerability is ZDI-CAN-28703?
ZDI-CAN-28703 is classified as a local privilege escalation vulnerability affecting Bitdefender Total Security.
Who is affected by ZDI-CAN-28703?
Any users of Bitdefender Total Security installations are potentially affected by ZDI-CAN-28703.
What must an attacker do to exploit ZDI-CAN-28703?
An attacker must first execute low-privileged code on the target system to successfully exploit ZDI-CAN-28703.