PT-2025-3127 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image macOS versions before build 41725 Acronis True Image Windows versions before build 41736 Description: The issue is related to sensitive information disclosure due to missing authentication. This affects the ability to prote...

Acronis True Image macOS Command Line Injection

The vulnerability of the Acronis True Image operating system’s backup and data recovery software for macOS stems from the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability can allow attackers to enhance their privilege...

CVE-2024-34013

Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image macOS before build 41396, Acronis True Image OEM macOS before build 42571...

CVE-2024-34013

CVE-2024-34013 affects Acronis True Image on macOS prior to build 41396. The issue is a local privilege escalation caused by an OS command injection vulnerability in the product, as reflected in multiple sources. The observed impact is elevation of privileges without user interaction. Remediation...

CVE-2024-34013

Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image macOS before build 41396, Acronis True Image OEM macOS before build 42571...

CVE-2024-34013

Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image macOS before build 41396, Acronis True Image OEM macOS before build 42571...

CVE-2024-34013: Improper Neutralization of Special Elements used in an OS Command

Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image macOS before build 41396, Acronis True Image OEM macOS before build 42571...

CVE-2024-34010: Unquoted Search Path or Element

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758, Acronis Cyber Protect 16 Windows before build 38690, Acronis True Image Windows before build 42386, Acronis True Image OEM Windo...

PT-2024-5393 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image macOS versions before build 41396 Description: The issue is related to a local privilege escalation due to an OS command injection vulnerability. This vulnerability may allow an attacker to elevate their privileges. The...

CVE-2023-48677: Uncontrolled Search Path Element

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40901, Acronis Cyber Protect Cloud Agent Windows before build 39378, Acronis Cyber Protect 16 Windows before build 39938, Acronis True Image O...

CVE-2023-44208: Missing Authorization

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

CVE-2023-5042: Incorrect Default Permissions

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

CVE-2022-46869: Externally Controlled Reference to a Resource in Another Sphere

Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis True Image OEM Windows before build 42575...

CVE-2023-41743: Improper Privilege Management

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis Cyber Protect Cloud Agent Windows before build 31637, Acronis Cyber Protect 15 Windows before build 35979,...

Acronis True Image Data Forgery Issue Vulnerability

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image is vulnerable to a data forgery issue that stems from unrestricted...

Acronis True Image Competitive Conditions Issue Vulnerability

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image suffers from a competing condition issue vulnerability that can be...

CVE-2022-24114

Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office macOS before build 39605, Acronis True Image 2021 macOS before build 39287...

CVE-2022-24115

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office macOS before build 39605, Acronis True Image 2021 macOS before build 39287...

CVE-2022-24114

Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office macOS before build 39605, Acronis True Image 2021 macOS before build 39287...

CVE-2022-24115

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office macOS before build 39605, Acronis True Image 2021 macOS before build 39287...