Acronis / True Image
26 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-33271 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902. | MEDIUM | 6.7 | Apr 2, 2026 |
| CVE-2026-27774 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902. | MEDIUM | 6.7 | Apr 2, 2026 |
| CVE-2026-28728 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42902. | MEDIUM | 6.7 | Apr 2, 2026 |
| CVE-2024-34013 | Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) before build 41396, Acron… | HIGH | 7.8 | Jul 18, 2024 |
| CVE-2021-44206 | Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service | HIGH | 7.3 | Feb 4, 2022 |
| CVE-2021-44204 | Local privilege escalation via named pipe due to improper access control checks | HIGH | 7.8 | Feb 4, 2022 |
| CVE-2022-24114 | Local privilege escalation due to race condition on application startup | HIGH | 7.0 | Feb 4, 2022 |
| CVE-2021-44205 | Local privilege escalation due to DLL hijacking vulnerability | HIGH | 7.3 | Feb 4, 2022 |
| CVE-2022-24115 | Local privilege escalation due to unrestricted loading of unsigned libraries | HIGH | 7.8 | Feb 4, 2022 |
| CVE-2022-24113 | Local privilege escalation due to excessive permissions assigned to child processes | HIGH | 7.8 | Feb 4, 2022 |
| CVE-2021-32577 | Acronis True Image prior to 2021 Update 5 for Windows allowed local privilege escalation due to insecure folder permissions. | HIGH | 7.8 | Aug 5, 2021 |
| CVE-2021-32581 | Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653, Acronis Cyber Pro… | HIGH | 8.1 | Aug 5, 2021 |
| CVE-2021-32578 | Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling (issue 2 of 2). | HIGH | 7.8 | Aug 5, 2021 |
| CVE-2021-32576 | Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling (issue 1 of 2). | HIGH | 7.8 | Aug 5, 2021 |
| CVE-2021-32580 | Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking. | HIGH | 7.8 | Aug 5, 2021 |
| CVE-2021-32579 | Acronis True Image prior to 2021 Update 4 for Windows and Acronis True Image prior to 2021 Update 5 for macOS allowed an unauthenticated attacker (who has a lo… | HIGH | 7.8 | Aug 5, 2021 |
| CVE-2020-15495 | Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration. | HIGH | 7.8 | Jul 15, 2021 |
| CVE-2020-25593 | Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions. | MEDIUM | 6.7 | Jul 15, 2021 |
| CVE-2020-15496 | Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions. | HIGH | 7.8 | Jul 15, 2021 |
| CVE-2020-25736 | Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration. | HIGH | 7.8 | Jul 15, 2021 |
| CVE-2020-35145 | Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Un… | HIGH | 7.8 | Jan 29, 2021 |
| CVE-2020-10140 | Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramD… | HIGH | 7.8 | Oct 21, 2020 |
| CVE-2020-10139 | Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\. Acronis True Image cont… | HIGH | 7.8 | Oct 21, 2020 |
| CVE-2017-3219 | Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provid… | HIGH | 8.8 | Jun 21, 2017 |
| CVE-2008-1280 | Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows re… | MEDIUM | 5.0 | Mar 10, 2008 |
Showing 1 to 25 of 26 CVEs