Privileged registry-key deletion via registry symlink

Improper access control in Bitdefender Engines before 7.92659 allows local users to delete privileged registry keys through a registry symlink. The Windows bdservicehost.exe component follows an attacker-directed Registry symbolic link while deleting a key, redirecting the privileged operation to a protected target. Exploitation requires local execution and user interaction; successful abuse deletes an attacker-selected privileged registry key.