CVE-2024-49386

The CVE-2024-49386 entry affects Acronis Cyber Files (Windows) prior to build 9.0.0x24. The vulnerability stems from spell-jacking, leading to sensitive information disclosure (confidentiality impact HIGH; integrity/availability not affected per the provided sources). No exploitation details are ...

CVE-2024-49391

CVE-2024-49391 affects Acronis Cyber Files on Windows prior to build 9.0.0x24. The vulnerability is a DLL hijacking issue that enables local privilege escalation. Root cause: DLL search order/harmless loading behavior leads to an attacker-controlled DLL being loaded with SYSTEM-level or higher pr...

CVE-2024-49390

CVE-2024-49390 affects Acronis Cyber Files on Windows prior to 9.0.0x24, with local privilege escalation via DLL hijacking as the root cause. The vulnerability allows an attacker with local access to potentially gain elevated privileges. No exploitation details are provided in the connected docum...

CVE-2024-49392

CVE-2024-49392 is an XSS vulnerability in Acronis Cyber Files for Windows prior to build 9.0.0x24, disclosed via PT-2024-33504 and corroborated by other sources. The issue occurs on the enrollment invitation page, allowing stored XSS through injected scripts. Affected product: Acronis Cyber Files...

CVE-2024-49389

CVE-2024-49389 affects Acronis Cyber Files (Windows) prior to build 9.0.0x24. The vulnerability stems from insecure folder permissions that enable local privilege escalation. Affected component is the file system/installation directory permissions which, when exploited, grant high integrity, conf...