2160 matches found
CVE-2024-55542
Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169, Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35895...
CVE-2024-55541
Stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 39169...
CVE-2024-55540
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...
CVE-2024-55540
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...
CVE-2024-55541
Stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 39169...
CVE-2024-55541
CVE-2024-55541 is an XSS vulnerability affecting Acronis Cyber Protect 16 on Linux/Windows prior to build 39169, caused by missing origin validation in postMessage. The PT-2025-1146 report provides concrete details: vulnerable software and affected versions, and a remediation path—update to build...
CVE-2024-55541
Stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 39169...
CVE-2024-55541
Stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 39169...
CVE-2024-55542
CVE-2024-55542 is a local privilege-escalation in Acronis Cyber Protect 16 (Linux/macOS/Windows) before build 39169 and Acronis Cyber Protect Cloud Agent before build 35895, arising from excessive permissions on the Tray Monitor service. Connected sources confirm the vulnerable components and aff...
CVE-2024-55542
Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169, Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35895...
CVE-2024-55542
Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169, Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35895...
CVE-2024-56414
The CVE-2024-56414 entry describes a vulnerability in Acronis Cyber Protect 16 for Windows prior to build 39169, where the web installer integrity check uses a weak hash algorithm. Affected product/version: Acronis Cyber Protect 16 (Windows) before build 39169. Impact and exploit details are not ...
CVE-2024-56414
Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...
CVE-2024-56414
Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...
CVE-2024-56413
Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...
CVE-2024-56413
Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...
CVE-2024-56413
The CVE-2024-56413 issue affects Acronis Cyber Protect 16 (Windows) prior to build 39169 and is due to missing session invalidation after a user is deleted. This can leave a deleted user’s session active, creating potential access risks. The PT-2025-3276 entry confirms affected versions and recom...
CVE-2024-55540
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...
CVE-2024-55540
CVE-2024-55540 describes a local privilege escalation caused by DLL hijacking in Acronis Cyber Protect 16 for Windows (pre-build 39169). The available connected documents confirm the root cause as DLL hijacking and identify the affected product by name; no other exploit details, attacker vector, ...