CVE-2008-1279

Summary: CVE-2008-1279 affects Acronis True Image Group Server 1.5.19.191 and earlier (included in Acronis True Image Enterprise Server 9.5.0.8072 and other True Image packages). The issue is an out-of-bounds read triggered by a packet with an invalid length field, leading to remote denial of ser...

CVE-2020-10139

CVE-2020-10139 affects Acronis True Image 2021. An OpenSSL component sets an OPENSSLDIR under C:\jenkins_agent, and a privileged service uses this component. Unprivileged Windows users can create subdirectories off the system root to point an openssl.cnf to a crafted file, enabling arbitrary code...

CVE-2020-25736

CVE-2020-25736 affects Acronis True Image on macOS (2019 update 1 through 2021 update 1). The root cause is an insecure XPC service configuration that enables local privilege escalation via a vulnerable helper executable (com.acronis.trueimagehelper). Public references note a local exploit path a...

CVE-2020-35145

CVE-2020-35145 affects Acronis True Image for Windows prior to 2021 Update 3, with a DLL hijacking (Untrusted Search Path) local privilege escalation in multiple components. Root cause: untrusted search path; impact: local privilege escalation. Affected versions are prior to 2021 Update 3. Mitiga...

CVE-2021-44204

The CVE-2021-44204 entry concerns a local privilege escalation via named pipes caused by improper access control checks. Affected Windows products and builds include: Acronis Cyber Protect 15 before 28035, Acronis Agent before 27147, Acronis Cyber Protect Home Office before 39612, and Acronis Tru...

CVE-2020-10140

CVE-2020-10140 affects Acronis True Image 2021, where ACLs for C:\ProgramData\Acronis are not set correctly. This allows an unprivileged user to achieve arbitrary code execution with SYSTEM privileges by placing a DLL in several paths under C:\ProgramData\Acronis, because some privileged processe...

CVE-2017-3219

CVE-2017-3219 affects Acronis True Image up to 2017 Build 8053, which performs software updates over HTTP with updates only verified by a server-provided MD5 hash. This design allows a potential attacker on the same network or able to influence traffic to cause the update process to execute arbit...

CVE-2022-24115

CVE-2022-24115 concerns local privilege escalation due to unrestricted loading of unsigned libraries. Affected products on macOS include Acronis Cyber Protect Home Office (before build 39605) and Acronis True Image 2021 (before build 39287). Root cause is unsigned library loading without proper v...

CVE-2021-32581

CVE-2021-32581 affects multiple Acronis products: Acronis True Image for Windows (before 2021 Update 4) and macOS (before 2021 Update 5), Acronis Agent (before build 26653), and Acronis Cyber Protect (before build 27009). The underlying issue is failure to implement SSL certificate validation, le...

CVE-2021-44206

CVE-2021-44206 is a local privilege escalation caused by DLL hijacking in the Acronis Media Builder service. Affected products are Acronis Cyber Protect Home Office (Windows) prior to build 39612 and Acronis True Image 2021 (Windows) prior to build 39287. The vulnerability, described in NVD and r...

CVE-2022-24113

CVE-2022-24113 : Local privilege escalation due to excessive permissions assigned to child processes. Affects Windows versions of Acronis products listed in the CVE: Acronis Cyber Protect 15 (before 28035), Acronis Agent (before 27147), Acronis Cyber Protect Home Office (before 39612), and Acroni...

CVE-2021-44205

CVE-2021-44205 is a local privilege escalation in Acronis products due to DLL hijacking in the Acronis Media Builder service. Affected are Acronis Cyber Protect Home Office (Windows) before build 39612 and Acronis True Image 2021 (Windows) before build 39287. Documented impact is local elevation ...

CVE-2008-1280

CVE-2008-1280 affects Acronis True Image Windows Agent 1.0.0.54 and earlier, included with Acronis True Image Enterprise Server 9.5.0.8072 and other True Image packages. An attacker can remotely trigger a denial of service (crash) by sending a malformed packet to port 9876, causing a NULL pointer...

CVE-2022-24114

CVE-2022-24114 affects Acronis Cyber Protect Home Office (macOS) before build 39605 and Acronis True Image 2021 (macOS) before build 39287. Root cause: a race condition during application startup leading to local privilege escalation. NVD metrics indicate local access with medium–high impact depe...

CVE-2021-32579

CVE-2021-32579 affects Acronis True Image for Windows (prior to 2021 Update 4) and macOS (prior to 2021 Update 5). An unauthenticated attacker with local code execution ability can tamper with the micro-service API. CVSS v3.1: 7.8 (High). No explicit remediation/version fix is stated in the provi...

CVE-2021-32578

CVE-2021-32578 affects Acronis True Image for Windows prior to 2021 Update 4. The root cause is improper soft link handling, enabling local privilege escalation (local, no user interaction; impact and CVSS: high). The recommended fix is to update to 2021 Update 4 for Windows (per description).

CVE-2020-15495

CVE-2020-15495 affects Acronis True Image for macOS (2019 update 1 through 2020). The root cause is an insecure XPC service configuration that can enable local privilege escalation. The available sources validate the affected product and the local attack surface, but do not provide exploit detail...

CVE-2020-15496

Affected product: Acronis True Image for Mac prior to 2021 Update 4. Issue: local privilege escalation caused by insecure folder permissions in the product. Root cause: insecure permissions enabling a local attacker with low privileges to elevate to higher privileges. Impact: per CVSS metrics, hi...

CVE-2021-32576

CVE-2021-32576 affects Acronis True Image for Windows prior to 2021 Update 4. The root cause is improper soft link handling, enabling local privilege escalation (issue 1 of 2). Exploitation is local, with low privileges required and no user interaction. The impact, per CVSS data, is high on confi...

CVE-2021-32580

CVE-2021-32580 affects Acronis True Image for Windows prior to 2021 Update 4. The issue is a DLL hijacking flaw that enables local privilege escalation. Connected sources corroborate the vulnerability as a local-privilege-elevation issue tied to DLL loading, but do not provide exploit details or ...

CVE-2021-32577

CVE-2021-32577 affects Acronis True Image on Windows prior to 2021 Update 5, where local privilege escalation is caused by insecure folder permissions. Impact is partial confidentiality/integrity/availability with local access. Remediation: upgrade to 2021 Update 5 or later of Acronis True Image ...

CVE-2020-25593

CVE-2020-25593 affects Acronis True Image (macOS) up through 2021. The vulnerability enables local privilege escalation from admin to root due to insecure folder permissions. The available sources describe the root cause as improper permissions, allowing an untrusted admin process to gain higher ...

CVE-2026-27774

CVE-2026-27774 affects Acronis True Image for Windows prior to build 42902. The issue is a DLL hijacking vulnerability that leads to local privilege escalation. Documentation lists the root cause as DLL search/loading issues; attack vector is local with high confidentiality/integrity/availability...

CVE-2026-28728

In Acronis True Image (Windows) prior to build 42902, a local privilege escalation is reported due to a DLL hijacking vulnerability. The affected component is the application on Windows; root cause is DLL hijacking. Public details explicitly state the product and build range; no exploitation deta...

CVE-2026-33271

CVE-2026-33271 is an observed local privilege escalation in Acronis True Image (Windows) before build 42902, caused by insecure folder permissions. The issue enables elevation of privileges from a local attacker. CVSSv3 metrics indicate a Local attack vector, High impact on Confidentiality, Integ...