Local Privilege Escalation in Bitdefender Total Security by Bitdefender

CVE-2025-7073

What is CVE-2025-7073?

A local privilege escalation vulnerability in Bitdefender Total Security allows low-privileged attackers to escalate their privileges. This vulnerability takes advantage of the bdservicehost.exe process, which improperly deletes files from a writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation. Consequently, this oversight enables arbitrary file deletion. Furthermore, it can be exploited in conjunction with a file copy operation during network events and a filter driver bypass through DLL injection to allow arbitrary file copy and code execution with elevated privileges.

References