# cve.now: Acronis

The newest entries naming Acronis as an affected vendor (up to 200), of 206 in all, 2 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-87879](https://cve.now/CVE-2026-87879.md): Sensitive information disclosure due to improper token validation. (CVSS 5.9)
- [CVE-2026-87878](https://cve.now/CVE-2026-87878.md): Linux binaries have executable stack attribute enabled. (CVSS 6.3)
- [CVE-2026-87102](https://cve.now/CVE-2026-87102.md): Sensitive information disclosure and manipulation due to improper token validation. (CVSS 7.4)
- [CVE-2026-87100](https://cve.now/CVE-2026-87100.md): Protection mechanism failure due to missing binary hardening in Linux executables. (CVSS 3.6)
- [CVE-2026-87099](https://cve.now/CVE-2026-87099.md): Cross-site scripting (XSS) vulnerability due to improper input validation. (CVSS 5.7)
- [CVE-2025-30414](https://cve.now/CVE-2025-30414.md): Local privilege escalation due to improper authentication. (CVSS 7.1)
- [CVE-2026-87098](https://cve.now/CVE-2026-87098.md): Sensitive information disclosure due to improper authorization. (CVSS 3.1)
- [CVE-2026-87880](https://cve.now/CVE-2026-87880.md): Sensitive information disclosure due to missing SSL certificate verification affecting one component. (CVSS 6.8)
- [CVE-2026-87103](https://cve.now/CVE-2026-87103.md): Sensitive information disclosure and manipulation due to improper token validation. (CVSS 7.4)
- [CVE-2026-87101](https://cve.now/CVE-2026-87101.md): Sensitive information disclosure due to improper token validation. (CVSS 6.2)
- [CVE-2026-87097](https://cve.now/CVE-2026-87097.md): Sensitive information disclosure due to insufficiently protected credentials. (CVSS 5.3)
- [CVE-2026-87096](https://cve.now/CVE-2026-87096.md): Sensitive information disclosure and manipulation due to improper authorization checks. (CVSS 3.3)
- [CVE-2026-87095](https://cve.now/CVE-2026-87095.md): Sensitive information disclosure and manipulation due to improper authorization checks. (CVSS 9.1)
- [CVE-2026-87886](https://cve.now/CVE-2026-87886.md): Local privilege escalation due to insecure file permissions. (CVSS 7.8, KEV)
- [CVE-2026-44682](https://cve.now/CVE-2026-44682.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 7.3)
- [CVE-2026-42061](https://cve.now/CVE-2026-42061.md): Local privilege escalation due to excessive permissions assigned to child processes. (CVSS 7.3)
- [CVE-2026-50033](https://cve.now/CVE-2026-50033.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 7.3)
- [CVE-2026-44609](https://cve.now/CVE-2026-44609.md): Local privilege escalation due to EXE hijacking vulnerability. (CVSS 7.3)
- [CVE-2026-41220](https://cve.now/CVE-2026-41220.md): Local privilege escalation due to improper input validation. (CVSS 7.8)
- [CVE-2026-41952](https://cve.now/CVE-2026-41952.md): Local privilege escalation due to improper input validation. (CVSS 7.8)
- [CVE-2026-25852](https://cve.now/CVE-2026-25852.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.7)
- [CVE-2026-33092](https://cve.now/CVE-2026-33092.md): Local privilege escalation due to improper handling of environment variables. (CVSS 7.8)
- [CVE-2026-33271](https://cve.now/CVE-2026-33271.md): Local privilege escalation due to insecure folder permissions. (CVSS 6.7)
- [CVE-2026-27774](https://cve.now/CVE-2026-27774.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.7)
- [CVE-2026-28728](https://cve.now/CVE-2026-28728.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.7)
- [CVE-2026-28726](https://cve.now/CVE-2026-28726.md): Sensitive information disclosure due to improper access control. (CVSS 4.3)
- [CVE-2026-28725](https://cve.now/CVE-2026-28725.md): Sensitive information disclosure due to improper configuration of a headless browser. (CVSS 5.5)
- [CVE-2025-30413](https://cve.now/CVE-2025-30413.md): Credentials are not deleted from Acronis Agent after plan revocation. (CVSS 4.4)
- [CVE-2026-28724](https://cve.now/CVE-2026-28724.md): Unauthorized data access due to insufficient access control validation. (CVSS 4.3)
- [CVE-2026-28723](https://cve.now/CVE-2026-28723.md): Unauthorized report deletion due to insufficient access control. (CVSS 4.3)
- [CVE-2026-28722](https://cve.now/CVE-2026-28722.md): Local privilege escalation due to improper soft link handling. (CVSS 7.3)
- [CVE-2026-28721](https://cve.now/CVE-2026-28721.md): Local privilege escalation due to improper soft link handling. (CVSS 7.3)
- [CVE-2026-28720](https://cve.now/CVE-2026-28720.md): Unauthorized modification of settings due to insufficient authorization checks. (CVSS 4.3)
- [CVE-2026-28719](https://cve.now/CVE-2026-28719.md): Unauthorized resource manipulation due to improper authorization checks. (CVSS 4.3)
- [CVE-2026-28718](https://cve.now/CVE-2026-28718.md): Denial of service due to insufficient input validation in authentication logging. (CVSS 5.3)
- [CVE-2026-28717](https://cve.now/CVE-2026-28717.md): Local privilege escalation due to improper directory permissions. (CVSS 5.0)
- [CVE-2026-28716](https://cve.now/CVE-2026-28716.md): Information disclosure and manipulation due to improper authorization checks. (CVSS 4.4)
- [CVE-2026-28715](https://cve.now/CVE-2026-28715.md): Sensitive information disclosure due to improper authorization checks. (CVSS 6.5)
- [CVE-2026-28714](https://cve.now/CVE-2026-28714.md): Unnecessary transmission of sensitive cryptographic material. (CVSS 4.8)
- [CVE-2026-28713](https://cve.now/CVE-2026-28713.md): Default credentials set for local privileged user in Virtual Appliance. (CVSS 7.1)
- [CVE-2026-28712](https://cve.now/CVE-2026-28712.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.3)
- [CVE-2026-28711](https://cve.now/CVE-2026-28711.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.3)
- [CVE-2026-28710](https://cve.now/CVE-2026-28710.md): Sensitive information disclosure and manipulation due to improper authentication. (CVSS 8.1)
- [CVE-2026-28709](https://cve.now/CVE-2026-28709.md): Unauthorized resource manipulation due to improper authorization checks. (CVSS 4.3)
- [CVE-2025-11790](https://cve.now/CVE-2025-11790.md): Credentials are not deleted from Acronis Agent after plan revocation. (CVSS 4.4)
- [CVE-2025-11791](https://cve.now/CVE-2025-11791.md): Sensitive information disclosure and manipulation due to insufficient authorization checks. (CVSS 5.5)
- [CVE-2025-11792](https://cve.now/CVE-2025-11792.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 7.3)
- [CVE-2026-28727](https://cve.now/CVE-2026-28727.md): Local privilege escalation due to insecure Unix socket permissions. (CVSS 7.8)
- [CVE-2025-30416](https://cve.now/CVE-2025-30416.md): Sensitive data disclosure and manipulation due to missing authorization. (CVSS 10.0)
- [CVE-2025-30410](https://cve.now/CVE-2025-30410.md): Sensitive data disclosure and manipulation due to missing authentication. (CVSS 9.8)
- [CVE-2025-30412](https://cve.now/CVE-2025-30412.md): Sensitive data disclosure and manipulation due to improper authentication. (CVSS 10.0)
- [CVE-2025-30411](https://cve.now/CVE-2025-30411.md): Sensitive data disclosure and manipulation due to improper authentication. (CVSS 10.0)
- [CVE-2026-0705](https://cve.now/CVE-2026-0705.md): Local privilege escalation due to insecure folder permissions. (CVSS 6.7)
- [CVE-2025-7779](https://cve.now/CVE-2025-7779.md): Local privilege escalation due to insecure XPC service configuration. (CVSS 8.8)
- [CVE-2025-11178](https://cve.now/CVE-2025-11178.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 7.3)
- [CVE-2025-9578](https://cve.now/CVE-2025-9578.md): Local privilege escalation due to insecure folder permissions. (CVSS 7.8)
- [CVE-2025-48963](https://cve.now/CVE-2025-48963.md): Local privilege escalation due to improper soft link handling. (CVSS 7.3)
- [CVE-2025-48962](https://cve.now/CVE-2025-48962.md): Sensitive information disclosure due to SSRF. (CVSS 4.3)
- [CVE-2025-48961](https://cve.now/CVE-2025-48961.md): Local privilege escalation due to insecure folder permissions. (CVSS 7.3)
- [CVE-2025-48960](https://cve.now/CVE-2025-48960.md): Weak server key used for TLS encryption. (CVSS 5.9)
- [CVE-2025-48959](https://cve.now/CVE-2025-48959.md): Local privilege escalation due to insecure file permissions. (CVSS 6.7)
- [CVE-2025-30415](https://cve.now/CVE-2025-30415.md): Denial of service due to improper handling of malformed input. (CVSS 7.5)
- [CVE-2025-30409](https://cve.now/CVE-2025-30409.md): Denial of service due to allocation of resources without limits. (CVSS 5.5)
- [CVE-2025-30408](https://cve.now/CVE-2025-30408.md): Local privilege escalation due to insecure folder permissions. (CVSS 6.7)
- [CVE-2025-30407](https://cve.now/CVE-2025-30407.md): Local privilege escalation due to a binary hijacking vulnerability. (CVSS 6.3)
- [CVE-2025-24832](https://cve.now/CVE-2025-24832.md): Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. (CVSS 4.4)
- [CVE-2025-24828](https://cve.now/CVE-2025-24828.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.3)
- [CVE-2025-24827](https://cve.now/CVE-2025-24827.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.3)
- [CVE-2025-24829](https://cve.now/CVE-2025-24829.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.3)
- [CVE-2025-24830](https://cve.now/CVE-2025-24830.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.3)
- [CVE-2025-24831](https://cve.now/CVE-2025-24831.md): Local privilege escalation due to unquoted search path vulnerability. (CVSS 6.6)
- [CVE-2025-24826](https://cve.now/CVE-2025-24826.md): Local privilege escalation due to insecure folder permissions. (CVSS 6.7)
- [CVE-2024-55541](https://cve.now/CVE-2024-55541.md): Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. (CVSS 3.1)
- [CVE-2024-55542](https://cve.now/CVE-2024-55542.md): Local privilege escalation due to excessive permissions assigned to Tray Monitor service. (CVSS 4.4)
- [CVE-2024-56414](https://cve.now/CVE-2024-56414.md): Web installer integrity check used weak hash algorithm. (CVSS 5.5)
- [CVE-2024-56413](https://cve.now/CVE-2024-56413.md): Missing session invalidation after user deletion. (CVSS 6.1)
- [CVE-2024-55540](https://cve.now/CVE-2024-55540.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.6)
- [CVE-2024-55543](https://cve.now/CVE-2024-55543.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 7.3)
- [CVE-2024-49385](https://cve.now/CVE-2024-49385.md): Sensitive information disclosure due to insecure folder permissions. (CVSS 5.5)
- [CVE-2024-55538](https://cve.now/CVE-2024-55538.md): Sensitive information disclosure due to missing authentication. (CVSS 4.0)
- [CVE-2024-55539](https://cve.now/CVE-2024-55539.md): Weak algorithm used to sign RPM package. (CVSS 2.5)
- [CVE-2024-34015](https://cve.now/CVE-2024-34015.md): Sensitive information disclosure during file browsing due to improper symbolic link handling. (CVSS 3.3)
- [CVE-2024-34014](https://cve.now/CVE-2024-34014.md): Arbitrary file overwrite during recovery due to improper symbolic link handling. (CVSS 5.5)
- [CVE-2024-49386](https://cve.now/CVE-2024-49386.md): Sensitive information disclosure due to spell-jacking. (CVSS 5.7)
- [CVE-2024-49389](https://cve.now/CVE-2024-49389.md): Local privilege escalation due to insecure folder permissions. (CVSS 7.8)
- [CVE-2024-49390](https://cve.now/CVE-2024-49390.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 7.3)
- [CVE-2024-49391](https://cve.now/CVE-2024-49391.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.7)
- [CVE-2024-49392](https://cve.now/CVE-2024-49392.md): Stored cross-site scripting (XSS) vulnerability on enrollment invitation page. (CVSS 5.7)
- [CVE-2024-49388](https://cve.now/CVE-2024-49388.md): Sensitive information manipulation due to improper authorization. (CVSS 3.1)
- [CVE-2024-49387](https://cve.now/CVE-2024-49387.md): Cleartext transmission of sensitive information in acep-collector service. (CVSS 5.4)
- [CVE-2024-49384](https://cve.now/CVE-2024-49384.md): Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. (CVSS 3.5)
- [CVE-2024-49383](https://cve.now/CVE-2024-49383.md): Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. (CVSS 3.5)
- [CVE-2024-49382](https://cve.now/CVE-2024-49382.md): Excessive attack surface in archive-server service due to binding to an unrestricted IP address. (CVSS 3.5)
- [CVE-2024-8903](https://cve.now/CVE-2024-8903.md): Local active protection service settings manipulation due to unnecessary privileges assignment. (CVSS 4.7)
- [CVE-2024-8767](https://cve.now/CVE-2024-8767.md): Sensitive data disclosure and manipulation due to unnecessary privileges assignment. (CVSS 9.9)
- [CVE-2024-8766](https://cve.now/CVE-2024-8766.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.7)
- [CVE-2024-34016](https://cve.now/CVE-2024-34016.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.5)
- [CVE-2024-34018](https://cve.now/CVE-2024-34018.md): Sensitive information disclosure due to insecure folder permissions. (CVSS 5.5)
- [CVE-2024-34017](https://cve.now/CVE-2024-34017.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.7)
- [CVE-2024-34019](https://cve.now/CVE-2024-34019.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.7)
- [CVE-2023-45249](https://cve.now/CVE-2023-45249.md): Remote command execution due to use of default passwords. (CVSS 9.8, KEV)
- [CVE-2024-34013](https://cve.now/CVE-2024-34013.md): Local privilege escalation due to OS command injection vulnerability. (CVSS 7.8)
- [CVE-2022-45449](https://cve.now/CVE-2022-45449.md): Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. (CVSS 7.7)
- [CVE-2024-34012](https://cve.now/CVE-2024-34012.md): Local privilege escalation due to insecure folder permissions. (CVSS 4.4)
- [CVE-2024-34011](https://cve.now/CVE-2024-34011.md): Local privilege escalation due to insecure folder permissions. (CVSS 6.8)
- [CVE-2024-34010](https://cve.now/CVE-2024-34010.md): Local privilege escalation due to unquoted search path vulnerability. (CVSS 8.2)
- [CVE-2023-48684](https://cve.now/CVE-2023-48684.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.1)
- [CVE-2023-48683](https://cve.now/CVE-2023-48683.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.1)
- [CVE-2023-48682](https://cve.now/CVE-2023-48682.md): Stored cross-site scripting (XSS) vulnerability in unit name. (CVSS 6.1)
- [CVE-2023-48681](https://cve.now/CVE-2023-48681.md): Self cross-site scripting (XSS) vulnerability in storage nodes search field. (CVSS 1.9)
- [CVE-2023-48680](https://cve.now/CVE-2023-48680.md): Sensitive information disclosure due to excessive collection of system information. (CVSS 3.3)
- [CVE-2023-48679](https://cve.now/CVE-2023-48679.md): Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. (CVSS 3.1)
- [CVE-2023-48678](https://cve.now/CVE-2023-48678.md): Sensitive information disclosure due to insecure folder permissions. (CVSS 5.5)
- [CVE-2023-48676](https://cve.now/CVE-2023-48676.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 3.3)
- [CVE-2023-48677](https://cve.now/CVE-2023-48677.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 7.3)
- [CVE-2023-45247](https://cve.now/CVE-2023-45247.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.1)
- [CVE-2023-45248](https://cve.now/CVE-2023-45248.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 6.6)
- [CVE-2023-45246](https://cve.now/CVE-2023-45246.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.1)
- [CVE-2023-45245](https://cve.now/CVE-2023-45245.md): Sensitive information disclosure due to missing authorization. (CVSS 3.3)
- [CVE-2023-45244](https://cve.now/CVE-2023-45244.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.1)
- [CVE-2023-45243](https://cve.now/CVE-2023-45243.md): Sensitive information disclosure due to missing authorization. (CVSS 5.5)
- [CVE-2023-45242](https://cve.now/CVE-2023-45242.md): Sensitive information disclosure due to missing authorization. (CVSS 5.5)
- [CVE-2023-45241](https://cve.now/CVE-2023-45241.md): Sensitive information leak through log files. (CVSS 4.4)
- [CVE-2023-45240](https://cve.now/CVE-2023-45240.md): Sensitive information disclosure due to missing authorization. (CVSS 5.5)
- [CVE-2023-44214](https://cve.now/CVE-2023-44214.md): Sensitive information disclosure due to missing authorization. (CVSS 5.5)
- [CVE-2023-44213](https://cve.now/CVE-2023-44213.md): Sensitive information disclosure due to excessive collection of system information. (CVSS 3.3)
- [CVE-2023-44211](https://cve.now/CVE-2023-44211.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.1)
- [CVE-2023-44212](https://cve.now/CVE-2023-44212.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.3)
- [CVE-2023-44210](https://cve.now/CVE-2023-44210.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.3)
- [CVE-2023-44209](https://cve.now/CVE-2023-44209.md): Local privilege escalation due to improper soft link handling. (CVSS 5.6)
- [CVE-2023-44208](https://cve.now/CVE-2023-44208.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.8)
- [CVE-2023-44207](https://cve.now/CVE-2023-44207.md): Stored cross-site scripting (XSS) vulnerability in protection plan name. (CVSS 6.7)
- [CVE-2023-44206](https://cve.now/CVE-2023-44206.md): Sensitive information disclosure and manipulation due to improper authorization. (CVSS 7.1)
- [CVE-2023-44159](https://cve.now/CVE-2023-44159.md): Sensitive information disclosure due to cleartext storage of sensitive information. (CVSS 5.5)
- [CVE-2023-44156](https://cve.now/CVE-2023-44156.md): Sensitive information disclosure due to spell-jacking. (CVSS 5.7)
- [CVE-2023-44205](https://cve.now/CVE-2023-44205.md): Sensitive information disclosure due to improper authorization. (CVSS 3.5)
- [CVE-2023-44161](https://cve.now/CVE-2023-44161.md): Sensitive information manipulation due to cross-site request forgery. (CVSS 3.1)
- [CVE-2023-44160](https://cve.now/CVE-2023-44160.md): Sensitive information manipulation due to cross-site request forgery. (CVSS 3.1)
- [CVE-2023-44158](https://cve.now/CVE-2023-44158.md): Sensitive information disclosure due to insufficient token field masking. (CVSS 3.5)
- [CVE-2023-44157](https://cve.now/CVE-2023-44157.md): Local privilege escalation due to insecure folder permissions. (CVSS 3.3)
- [CVE-2023-44155](https://cve.now/CVE-2023-44155.md): Sensitive information leak through log files. (CVSS 4.4)
- [CVE-2023-44154](https://cve.now/CVE-2023-44154.md): Sensitive information disclosure and manipulation due to improper authorization. (CVSS 4.6)
- [CVE-2023-44153](https://cve.now/CVE-2023-44153.md): Sensitive information disclosure due to cleartext storage of sensitive information in memory. (CVSS 2.2)
- [CVE-2023-44152](https://cve.now/CVE-2023-44152.md): Sensitive information disclosure and manipulation due to improper authentication. (CVSS 6.1)
- [CVE-2023-5042](https://cve.now/CVE-2023-5042.md): Sensitive information disclosure due to insecure folder permissions. (CVSS 5.5)
- [CVE-2023-4688](https://cve.now/CVE-2023-4688.md): Sensitive information leak through log files. (CVSS 4.4)
- [CVE-2023-41751](https://cve.now/CVE-2023-41751.md): Sensitive information disclosure due to improper token expiration validation. (CVSS 6.3)
- [CVE-2023-41750](https://cve.now/CVE-2023-41750.md): Sensitive information disclosure due to missing authorization. (CVSS 3.3)
- [CVE-2023-41749](https://cve.now/CVE-2023-41749.md): Sensitive information disclosure due to excessive collection of system information. (CVSS 4.4)
- [CVE-2022-46869](https://cve.now/CVE-2022-46869.md): Local privilege escalation during installation due to improper soft link handling. (CVSS 7.3)
- [CVE-2023-41748](https://cve.now/CVE-2023-41748.md): Remote command execution due to improper input validation. (CVSS 8.0)
- [CVE-2023-41747](https://cve.now/CVE-2023-41747.md): Sensitive information disclosure due to unauthenticated path traversal. (CVSS 6.5)
- [CVE-2023-41746](https://cve.now/CVE-2023-41746.md): Remote command execution due to improper input validation. (CVSS 8.0)
- [CVE-2023-41745](https://cve.now/CVE-2023-41745.md): Sensitive information disclosure due to excessive collection of system information. (CVSS 6.1)
- [CVE-2023-41744](https://cve.now/CVE-2023-41744.md): Local privilege escalation due to unrestricted loading of unsigned libraries. (CVSS 7.8)
- [CVE-2023-41743](https://cve.now/CVE-2023-41743.md): Local privilege escalation due to insecure driver communication port permissions. (CVSS 8.8)
- [CVE-2022-46868](https://cve.now/CVE-2022-46868.md): Local privilege escalation during recovery due to improper soft link handling. (CVSS 6.7)
- [CVE-2022-45451](https://cve.now/CVE-2022-45451.md): Local privilege escalation due to insecure driver communication port permissions. (CVSS 8.8)
- [CVE-2023-41742](https://cve.now/CVE-2023-41742.md): Excessive attack surface due to binding to an unrestricted IP address. (CVSS 4.3)
- [CVE-2023-2782](https://cve.now/CVE-2023-2782.md): Sensitive information disclosure due to improper authorization. (CVSS 5.5)
- [CVE-2022-4418](https://cve.now/CVE-2022-4418.md): Local privilege escalation due to unrestricted loading of unsigned libraries. (CVSS 7.8)
- [CVE-2022-45450](https://cve.now/CVE-2022-45450.md): Sensitive information disclosure and manipulation due to improper authorization. (CVSS 5.4)
- [CVE-2022-45459](https://cve.now/CVE-2022-45459.md): Sensitive information disclosure due to insecure registry permissions. (CVSS 3.8)
- [CVE-2022-45458](https://cve.now/CVE-2022-45458.md): Sensitive information disclosure and manipulation due to improper certification validation. (CVSS 4.2)
- [CVE-2022-45457](https://cve.now/CVE-2022-45457.md): Sensitive information disclosure and manipulation due to improper certification validation. (CVSS 4.2)
- [CVE-2022-45452](https://cve.now/CVE-2022-45452.md): Local privilege escalation due to insecure folder permissions. (CVSS 7.3)
- [CVE-2022-45453](https://cve.now/CVE-2022-45453.md): TLS/SSL weak cipher suites enabled. (CVSS 5.3)
- [CVE-2022-30995](https://cve.now/CVE-2022-30995.md): Sensitive information disclosure due to improper authentication. (CVSS 9.3)
- [CVE-2022-3405](https://cve.now/CVE-2022-3405.md): Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. (CVSS 9.3)
- [CVE-2023-2360](https://cve.now/CVE-2023-2360.md): Sensitive information disclosure due to CORS misconfiguration. (CVSS 3.1)
- [CVE-2023-2355](https://cve.now/CVE-2023-2355.md): Local privilege escalation due to a DLL hijacking vulnerability. (CVSS 6.7)
- [CVE-2022-45456](https://cve.now/CVE-2022-45456.md): Denial of service due to unauthenticated API endpoint. (CVSS 3.3)
- [CVE-2022-45455](https://cve.now/CVE-2022-45455.md): Local privilege escalation due to incomplete uninstallation cleanup. (CVSS 6.6)
- [CVE-2022-45454](https://cve.now/CVE-2022-45454.md): Sensitive information disclosure due to insecure folder permissions. (CVSS 2.2)
- [CVE-2022-44746](https://cve.now/CVE-2022-44746.md): Sensitive information disclosure due to insecure folder permissions. (CVSS 2.2)
- [CVE-2022-44745](https://cve.now/CVE-2022-44745.md): Sensitive information leak through log files. (CVSS 4.0)
- [CVE-2022-44744](https://cve.now/CVE-2022-44744.md): Local privilege escalation due to DLL hijacking vulnerability. (CVSS 2.2)
- [CVE-2022-44747](https://cve.now/CVE-2022-44747.md): Local privilege escalation due to improper soft link handling. (CVSS 2.2)
- [CVE-2022-44733](https://cve.now/CVE-2022-44733.md): Local privilege escalation due to insecure folder permissions. (CVSS 7.3)
- [CVE-2022-44732](https://cve.now/CVE-2022-44732.md): Local privilege escalation due to insecure folder permissions. (CVSS 7.3)
- [CVE-2022-30991](https://cve.now/CVE-2022-30991.md): HTML injection via report name (no CVSS)
- [CVE-2022-30992](https://cve.now/CVE-2022-30992.md): Open redirect via user-controlled query parameter (no CVSS)
- [CVE-2022-30993](https://cve.now/CVE-2022-30993.md): Cleartext transmission of sensitive information (no CVSS)
- [CVE-2022-30994](https://cve.now/CVE-2022-30994.md): Cleartext transmission of sensitive information (no CVSS)
- [CVE-2022-30990](https://cve.now/CVE-2022-30990.md): Sensitive information disclosure due to insecure folder permissions (no CVSS)
- [CVE-2022-30697](https://cve.now/CVE-2022-30697.md): Local privilege escalation due to insecure folder permissions (no CVSS)
- [CVE-2022-30696](https://cve.now/CVE-2022-30696.md): Local privilege escalation due to a DLL hijacking vulnerability (no CVSS)
- [CVE-2022-30695](https://cve.now/CVE-2022-30695.md): Local privilege escalation due to excessive permissions assigned to child processes (no CVSS)
- [CVE-2022-0483](https://cve.now/CVE-2022-0483.md): Local privilege escalation due to insecure folder permissions (no CVSS)
- [CVE-2021-44206](https://cve.now/CVE-2021-44206.md): Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service (no CVSS)
- [CVE-2021-44204](https://cve.now/CVE-2021-44204.md): Local privilege escalation via named pipe due to improper access control checks (no CVSS)
- [CVE-2022-24114](https://cve.now/CVE-2022-24114.md): Local privilege escalation due to race condition on application startup (no CVSS)
- [CVE-2021-44205](https://cve.now/CVE-2021-44205.md): Local privilege escalation due to DLL hijacking vulnerability (no CVSS)
- [CVE-2022-24115](https://cve.now/CVE-2022-24115.md): Local privilege escalation due to unrestricted loading of unsigned libraries (no CVSS)
- [CVE-2022-24113](https://cve.now/CVE-2022-24113.md): Local privilege escalation due to excessive permissions assigned to child processes (no CVSS)
- [CVE-2021-34800](https://cve.now/CVE-2021-34800.md): Sensitive information could be logged (no CVSS)
- [CVE-2021-44200](https://cve.now/CVE-2021-44200.md): Self cross-site scripting (XSS) was possible on devices page (no CVSS)
- [CVE-2021-44199](https://cve.now/CVE-2021-44199.md): DLL hijacking could lead to denial of service (no CVSS)
- [CVE-2021-44202](https://cve.now/CVE-2021-44202.md): Stored cross-site scripting (XSS) was possible in activity details (no CVSS)
- [CVE-2021-44203](https://cve.now/CVE-2021-44203.md): Stored cross-site scripting (XSS) was possible in protection plan details (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/acronis
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.