CVE-2024-49385: Incorrect Permission Assignment for Critical Resource

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image Windows before build 41736, Acronis True Image OEM Windows before build 42575...

CVE-2024-34013: Improper Neutralization of Special Elements used in an OS Command

Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image macOS before build 41396, Acronis True Image OEM macOS before build 42571...

CVE-2024-34010: Unquoted Search Path or Element

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758, Acronis Cyber Protect 16 Windows before build 38690, Acronis True Image Windows before build 42386, Acronis True Image OEM Windo...

CVE-2023-48677: Uncontrolled Search Path Element

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40901, Acronis Cyber Protect Cloud Agent Windows before build 39378, Acronis Cyber Protect 16 Windows before build 39938, Acronis True Image O...

CVE-2023-44208: Missing Authorization

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

CVE-2023-5042: Incorrect Default Permissions

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

CVE-2022-46869: Externally Controlled Reference to a Resource in Another Sphere

Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis True Image OEM Windows before build 42575...

CVE-2023-41743: Improper Privilege Management

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis Cyber Protect Cloud Agent Windows before build 31637, Acronis Cyber Protect 15 Windows before build 35979,...