Acronis vulnerabilities
206 CVEs and advisories name Acronis as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-48959Local privilege escalation due to insecure file permissions.
- CVE-2025-30415Denial of service due to improper handling of malformed input.
- CVE-2025-30409Denial of service due to allocation of resources without limits.
- CVE-2025-30408Local privilege escalation due to insecure folder permissions.
- CVE-2025-30407Local privilege escalation due to a binary hijacking vulnerability.
- CVE-2025-24832Arbitrary file overwrite during home directory recovery due to improper symbolic link handling.
- CVE-2025-24828Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2025-24827Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2025-24829Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2025-24830Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2025-24831Local privilege escalation due to unquoted search path vulnerability.
- CVE-2025-24826Local privilege escalation due to insecure folder permissions.
- CVE-2024-55541Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage.
- CVE-2024-55542Local privilege escalation due to excessive permissions assigned to Tray Monitor service.
- CVE-2024-56414Web installer integrity check used weak hash algorithm.
- CVE-2024-56413Missing session invalidation after user deletion.
- CVE-2024-55540Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2024-55543Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2024-49385Sensitive information disclosure due to insecure folder permissions.
- CVE-2024-55538Sensitive information disclosure due to missing authentication.
- CVE-2024-55539Weak algorithm used to sign RPM package.
- CVE-2024-34015Sensitive information disclosure during file browsing due to improper symbolic link handling.
- CVE-2024-34014Arbitrary file overwrite during recovery due to improper symbolic link handling.
- CVE-2024-49386Sensitive information disclosure due to spell-jacking.
- CVE-2024-49389Local privilege escalation due to insecure folder permissions.
- CVE-2024-49390Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2024-49391Local privilege escalation due to DLL hijacking vulnerability.
- CVE-2024-49392Stored cross-site scripting (XSS) vulnerability on enrollment invitation page.
- CVE-2024-49388Sensitive information manipulation due to improper authorization.
- CVE-2024-49387Cleartext transmission of sensitive information in acep-collector service.