CVE-2022-44747 - Local privilege escalation due to improper soft link handling

Back Back to CVE browser

HIGH

Local privilege escalation due to improper soft link handling

Published Nov 7, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.19%

Description

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107.

Affected products

Vendor Acronis Product Acronis Cyber Protect Home Office Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <40107

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Acronis

Acronis Cyber Protect Home Office

unaffected

Version	Status	Constraints
0	affected	<40107

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-59

CWE-610

References (1)

https://security-advisory.acronis.com/advisories/SEC-4540
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://security-advisory.acronis.com/advisories/SEC-4540		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Acronis

Published Nov 7, 2022

Updated May 1, 2025

Reserved Nov 4, 2022

Link CVE-2022-44747

CISA Vulnrichment

Updated May 1, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-44747

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-44747