Vulnerabilities > Acronis

DATE CVE VULNERABILITY TITLE RISK
2022-02-11 CVE-2022-0483 Incorrect Permission Assignment for Critical Resource vulnerability in Acronis VSS Doctor
Local privilege escalation due to insecure folder permissions.
local
low complexity
acronis CWE-732
7.8
7.8
2022-02-04 CVE-2021-44204 Unspecified vulnerability in Acronis products
Local privilege escalation via named pipe due to improper access control checks.
local
low complexity
acronis
7.8
7.8
2022-02-04 CVE-2021-44205 Uncontrolled Search Path Element vulnerability in Acronis Cyber Protect Home Office and True Image
Local privilege escalation due to DLL hijacking vulnerability.
local
low complexity
acronis CWE-427
7.3
7.3
2022-02-04 CVE-2021-44206 Uncontrolled Search Path Element vulnerability in Acronis Cyber Protect Home Office and True Image
Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service.
local
low complexity
acronis CWE-427
7.3
7.3
2022-02-04 CVE-2022-24113 Incorrect Default Permissions vulnerability in Acronis products
Local privilege escalation due to excessive permissions assigned to child processes.
local
low complexity
acronis CWE-276
7.8
7.8
2022-02-04 CVE-2022-24114 Race Condition vulnerability in Acronis Cyber Protect Home Office and True Image
Local privilege escalation due to race condition on application startup.
local
high complexity
acronis CWE-362
7.0
7.0
2022-02-04 CVE-2022-24115 Improper Verification of Cryptographic Signature vulnerability in Acronis Cyber Protect Home Office and True Image
Local privilege escalation due to unrestricted loading of unsigned libraries.
local
low complexity
acronis CWE-347
7.8
7.8
2021-11-29 CVE-2021-34800 Information Exposure Through Log Files vulnerability in Acronis Agent C21.03
Sensitive information could be logged.
network
low complexity
acronis CWE-532
7.5
7.5
2021-11-29 CVE-2021-44198 Uncontrolled Search Path Element vulnerability in Acronis Cyber Protect 15
DLL hijacking could lead to local privilege escalation.
local
low complexity
acronis CWE-427
7.8
7.8
2021-11-29 CVE-2021-44199 Uncontrolled Search Path Element vulnerability in Acronis Agent, Cyber Protect and Cyber Protect Home Office
DLL hijacking could lead to denial of service.
local
low complexity
acronis CWE-427
5.5
5.5