https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:10:18 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1089 certfr-2025-avi-1089 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1089 https://cve.radiocsirt.org/vuln/euvd-2026-278216 EUVD-2026-278216 https://cve.radiocsirt.org/vuln/euvd-2026-278216 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7073 <p>A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.</p> <p>A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-7073 https://cve.radiocsirt.org/vuln/ghsa-9247-4234-vwrq <p>A local privilege escalation vulnerability in Bitdefender Total Security 27.0.46.231 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.</p> <p>A local privilege escalation vulnerability in Bitdefender Total Security 27.0.46.231 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.</p> https://cve.radiocsirt.org/vuln/ghsa-9247-4234-vwrq https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2810 <p>Ein lokaler Angreifer kann eine Schwachstelle in Bitdefender Antivirus, Bitdefender Total Security und Bitdefender Internet Security ausnutzen, um seine Berechtigungen zu erweitern. Die Schwachstelle kann mit anderen Schwachstellen kombiniert werden, um Codeausführungen mit erweiterten Berechtigungen und das Kopieren beliebiger Dateien zu erreichen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Bitdefender Antivirus, Bitdefender Total Security und Bitdefender Internet Security ausnutzen, um seine Berechtigungen zu erweitern. Die Schwachstelle kann mit anderen Schwachstellen kombiniert werden, um Codeausführungen mit erweiterten Berechtigungen und das Kopieren beliebiger Dateien zu erreichen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2810