CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49386

The CVE-2024-49386 entry affects Acronis Cyber Files (Windows) prior to build 9.0.0x24. The vulnerability stems from spell-jacking, leading to sensitive information disclosure (confidentiality impact HIGH; integrity/availability not affected per the provided sources). No exploitation details are ...

CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49389

CVE-2024-49389 affects Acronis Cyber Files (Windows) prior to build 9.0.0x24. The vulnerability stems from insecure folder permissions that enable local privilege escalation. Affected component is the file system/installation directory permissions which, when exploited, grant high integrity, conf...

CVE-2024-49390

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49390

CVE-2024-49390 affects Acronis Cyber Files on Windows prior to 9.0.0x24, with local privilege escalation via DLL hijacking as the root cause. The vulnerability allows an attacker with local access to potentially gain elevated privileges. No exploitation details are provided in the connected docum...

CVE-2024-49391

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49391

CVE-2024-49391 affects Acronis Cyber Files on Windows prior to build 9.0.0x24. The vulnerability is a DLL hijacking issue that enables local privilege escalation. Root cause: DLL search order/harmless loading behavior leads to an attacker-controlled DLL being loaded with SYSTEM-level or higher pr...

CVE-2024-49391

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49392

CVE-2024-49392 is an XSS vulnerability in Acronis Cyber Files for Windows prior to build 9.0.0x24, disclosed via PT-2024-33504 and corroborated by other sources. The issue occurs on the enrollment invitation page, allowing stored XSS through injected scripts. Affected product: Acronis Cyber Files...

CVE-2024-49392

Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49392

Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

PT-2024-33500 · Acronis · Acronis Cyber Files

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Files Windows versions before 9.0.0x24 Description: The issue is related to local privilege escalation due to insecure folder permissions. Recommendations: For Acronis Cyber Files Windows versions before 9.0.0x24, update to a...

PT-2024-33503

Name of the Vulnerable Software and Affected Versions Acronis Cyber Files Windows versions before 9.0.0x24 Description The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This allows an attacker to potentially gain elevated privileges on the system...

CVE-2024-49391: Uncontrolled Search Path Element

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

PT-2024-33502 · Acronis · Acronis Cyber Files

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Files Windows versions before 9.0.0x24 Description: The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This allows an attacker to potentially gain elevated privileges on a system...

CVE-2024-49389: Incorrect Default Permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49390: Uncontrolled Search Path Element

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...