CVE-2025-24828

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24828

CVE-2025-24828: Local privilege escalation due to DLL hijacking in Acronis Cyber Protect Cloud Agent (Windows) prior to build 39378. Affects the agent binary/component; root cause is DLL hijacking. Impact is high on confidentiality and integrity with local attack vector and no user interaction re...

CVE-2025-24827

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24827

CVE-2025-24827 describes a local privilege escalation due to DLL hijacking affecting Acronis Cyber Protect Cloud Agent (Windows) prior to build 39378. The root cause is a DLL hijack condition in the agent, enabling an attacker with local access to elevate privileges. The available public sources ...

CVE-2025-24827

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24829

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24829

CVE-2025-24829 concerns a local privilege escalation via DLL hijacking in Acronis Cyber Protect Cloud Agent (Windows) prior to build 39378 . The vulnerability enables an attacker with local access and low privileges to potentially gain higher privileges on the host, as reflected by the CVSSv3/3.0...

CVE-2025-24829

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24830

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24830

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

CVE-2025-24830

CVE-2025-24830 affects Acronis Cyber Protect Cloud Agent (Windows) prior to build 39378. The issue is a DLL hijacking local privilege escalation (LOCAL, HIGH confidentiality/integrity impact with HIGH impact on those). Root cause: DLL loading as part of the agent allows elevation of privileges wi...

PT-2025-5584 · Acronis · Acronis Cyber Protect Cloud Agent

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions prior to build 39378 Description: The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This means that an attacker could potentially exploit the...

PT-2025-5582 · Acronis · Acronis Cyber Protect Cloud Agent

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions prior to build 39378 Description: The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This means that an attacker could potentially exploit this weaknes...

CVE-2025-24503

A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server...

CVE-2023-29080

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has...

CVE-2023-29080 Privilege escalation in InstallShield

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has...

CVE-2023-29080 Privilege escalation in InstallShield

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has...

CVE-2023-29080

CVE-2023-29080 concerns Revenera InstallShield (versions 2021 R2 and 2022 R2). A DLL hijacking vulnerability arises from an InstallScript custom action that extracts binaries to a predefined writable folder during installation. With standard user write access to these files/folders, an attacker c...

No need to RSVP: a closer look at the Tria stealer campaign

Introduction Since mid-2024, we've observed a malicious Android campaign leveraging wedding invitations as a lure to social-engineer victims into installing a malicious Android app APK, which we have named "Tria Stealer" after unique strings found in campaign samples. The primary targets of the...

Flexera FlexNet Publisher 安全漏洞

Flexera FlexNet Publisher FLEXlm is a software license management core component of the Entitlement Relationship Management Solution from Flexera, USA. The product provides software and hardware manufacturers with the ability to price, package and customize software license terms. A security...