CVE-2025-7073

FAUCET Score

CVE-2025-7073 is a local privilege escalation vulnerability affecting Bitdefender Total Security and other Bitdefender products, including Antivirus, Antivirus Plus, Internet Security, and Endpoint Security Tools. This high-severity flaw (CVSS 7.8) allows low-privileged attackers to gain elevated privileges by exploiting improper symbolic link validation during file deletion in a user-writable directory, which can be chained with other techniques for arbitrary file copy and code execution. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 30.0.25.77CPE matchmatch criteria	cpe:2.3:a:bitdefender:antivirus:::::free:::*
		< 27.0.47.241CPE matchmatch criteria	cpe:2.3:a:bitdefender:antivirus_plus::::::::
		< 7.9.20.515CPE matchmatch criteria	cpe:2.3:a:bitdefender:endpoint_security_tools::::::windows::*
		< 27.0.47.241CPE matchmatch criteria	cpe:2.3:a:bitdefender:internet_security::::::::
		< 27.0.47.241CPE matchmatch criteria	cpe:2.3:a:bitdefender:total_security::::::::

CVSS Data

CVSS version used by this source: 4.0

8.8HIGH

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

LOCAL

Attack Complexity

HIGH

Attack Requirements

PRESENT

Privileges Required

LOW

User Interaction

NONE

VS Confidentiality

HIGH