This vulnerability (CWE-59) in Bitdefender Total Security and Internet Security affects the File Shredder module on Windows platforms. It arises from improper handling of symbolic links before file access, enabling a local attacker with limited privileges to exploit a race condition and elevate their rights. The affected versions are those prior to 27.0.58.315. The CVSS 4.0 base score is 7.0, indicating a high severity with local attack vector, low attack complexity, no attack type, requiring low privileges and user interaction, and high impact on confidentiality, integrity, and availability. No official fix or patch is currently documented.

A less-privileged local user can exploit this vulnerability to elevate their privileges on the affected system. This could lead to unauthorized access or modification of files and potentially compromise system integrity and confidentiality. The vulnerability specifically affects the File Shredder module, which may allow an attacker to bypass intended security controls via symbolic link race conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit local access to trusted users only and monitor for suspicious local activity related to file shredding operations. Avoid running the File Shredder module in environments where untrusted users have local access.