PT-2025-3124 · Macrium · Macrium Reflect

Name of the Vulnerable Software and Affected Versions: Macrium Reflect versions prior to 8.1.8017 Description: A null pointer dereference issue allows a local attacker to cause a system crash or potentially elevate their privileges via executing a specially crafted executable. Recommendations:...

CVE-2024-55511

A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system crash or potentially elevate their privileges via executing a specially crafted executable...

CVE-2024-55511

CVE-2024-55511 affects Macrium Reflect; prior to 8.1.8017 there is a null pointer dereference in the product, allowing a local attacker to crash the system or potentially elevate privileges by executing a specially crafted executable. The issue comes from how the vulnerable component handles spec...

CVE-2024-55511

A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system crash or potentially elevate their privileges via executing a specially crafted executable...

Macrium Reflect 安全漏洞

Macrium Reflect is a backup utility for Microsoft Windows from Macrium. A security vulnerability exists in Macrium Reflect versions prior to 8.1.8017, which stems from the presence of a null pointer dereference that allows an attacker to elevate its privileges by executing a specially crafted...

CVE-2023-43896

A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code...

CVE-2023-43896

A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code...

CVE-2023-43896

A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code...

Buffer overflow

A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code...

PT-2023-29033

Name of the Vulnerable Software and Affected Versions Macrium Reflect versions 8.1.7544 and below Description A buffer overflow in Macrium Reflect allows attackers to escalate privileges or execute arbitrary code. Recommendations For Macrium Reflect versions 8.1.7544 and below, update to a versio...

Macrium Reflect Security Vulnerability

Macrium Reflect is a backup utility for Microsoft Windows from Macrium. A security vulnerability exists in Macrium Reflect 8.1.7544 and earlier versions that stems from the presence of a buffer overflow vulnerability. An attacker can exploit the vulnerability to escalate privileges or execute...

CVE-2023-43896

The CVE-2023-43896 describes a buffer overflow in Macrium Reflect versions 8.1.7544 and earlier that can allow privilege escalation or arbitrary code execution. Affected product: Macrium Reflect (Windows backup utility). Root cause: a buffer overflow in the software/article components (no specifi...

CVE-2023-43896

A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code...

CVE-2023-43896

A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code...

CVE-2020-10143

Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl. Macrium Reflect contains a privileged service that uses this OpenSSL component. Because unprivileged Windows users can create subdirectories off of the system root, a user can create the appropriate...

CVE-2020-10143

Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl. Macrium Reflect contains a privileged service that uses this OpenSSL component. Because unprivileged Windows users can create subdirectories off of the system root, a user can create the appropriate...

Design/Logic Flaw

Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl. Macrium Reflect contains a privileged service that uses this OpenSSL component. Because unprivileged Windows users can create subdirectories off of the system root, a user can create the appropriate...

CVE-2020-10143

Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl. Macrium Reflect contains a privileged service that uses this OpenSSL component. Because unprivileged Windows users can create subdirectories off of the system root, a user can create the appropriate...

CVE-2020-10143

CVE-2020-10143 affects Macrium Reflect via an OpenSSL OPENSSLDIR of C:\openssl\ and a privileged service that loads OpenSSL. An unprivileged Windows user can create a crafted openssl.cnf path to achieve arbitrary code execution with SYSTEM privileges. Remediation available: upgrade to Macrium Ref...

Macrium Reflect 7.2.x/7.3.x < 7.3.5281 Privilege Escalation

The version of Macrium Reflect installed on the remote Windows host is 7.2.x or 7.3.x prior to version 7.3.5281. It is, therefore, affected by a privilege escalation vulnerability related to the OpenSSL component. An unprivileged Windows user can exploit this, by creating the appropriate path to ...