Export limit exceeded: 425829 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 209

Export CSV
CVE-2022-30697

Local privilege escalation due to insecure folder permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 3640

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Acronis
Products
Snap Deploy
CVE-2022-30696

Local privilege escalation due to a DLL hijacking vulnerability

Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 3640

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Acronis
Products
Snap Deploy
CVE-2022-30695

Local privilege escalation due to excessive permissions assigned to child processes

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Snap Deploy (Windows) before build 3640

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Acronis
Products
Snap Deploy
CVE-2022-24115

Local privilege escalation due to unrestricted loading of unsigned libraries

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Acronis Apple
Products
Cyber Protect Home Office True Image Macos
CVE-2022-24114

Local privilege escalation due to race condition on application startup

Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Acronis Apple
Products
Cyber Protect Home Office True Image Macos
CVE-2022-24113

Local privilege escalation due to excessive permissions assigned to child processes

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Acronis Microsoft
Products
Agent Cyber Protect Cyber Protect Home Office and 2 more
CVE-2022-0483

Local privilege escalation due to insecure folder permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor (Windows) before build 53

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Acronis Microsoft
Products
Vss Doctor Windows
CVE-2021-44206

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Acronis Microsoft
Products
Cyber Protect Home Office True Image Windows
CVE-2021-44205

Local privilege escalation due to DLL hijacking vulnerability

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Acronis Microsoft
Products
Cyber Protect Home Office True Image Windows
CVE-2021-44204

Local privilege escalation via named pipe due to improper access control checks

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Acronis Microsoft
Products
Agent Cyber Protect Cyber Protect Home Office and 2 more
CVE-2021-44203

Stored cross-site scripting (XSS) was possible in protection plan details

Stored cross-site scripting (XSS) was possible in protection plan details. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 28035

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Acronis Linux Microsoft
Products
Cyber Protect Linux Kernel Windows
CVE-2021-44202

Stored cross-site scripting (XSS) was possible in activity details

Stored cross-site scripting (XSS) was possible in activity details. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 28035

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Acronis Linux Microsoft
Products
Cyber Protect Linux Kernel Windows
CVE-2021-44201

Cross-site scripting (XSS) was possible in notification pop-ups

Cross-site scripting (XSS) was possible in notification pop-ups. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 28035

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Acronis Linux Microsoft
Products
Cyber Protect Linux Kernel Windows
CVE-2021-44200

Self cross-site scripting (XSS) was possible on devices page

Self cross-site scripting (XSS) was possible on devices page. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 28035

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Acronis Linux Microsoft
Products
Cyber Protect Linux Kernel Windows
CVE-2021-44199

DLL hijacking could lead to denial of service

DLL hijacking could lead to denial of service. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27305, Acronis Cyber Protect Home Office (Windows) before build 39612

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Acronis Microsoft
Products
Agent Cyber Protect Cyber Protect Home Office and 1 more
CVE-2021-44198

DLL hijacking could lead to local privilege escalation

DLL hijacking could lead to local privilege escalation. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Acronis Microsoft
Products
Cyber Protect Windows
CVE-2021-38087

Reflected cross-site scripting (XSS) was possible on the login page in Acronis Cyber Protect 15 prior to build 27009.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Acronis
Products
Cyber Protect
CVE-2021-38086

Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Acronis Microsoft
Products
Cyber Protect Windows
CVE-2021-34800

Sensitive information could be logged

Sensitive information could be logged. The following products are affected: Acronis Agent (Windows, Linux, macOS) before build 27147

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Acronis
Products
Agent