Acronis

Records232All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high113CVSS 7.0–8.9

Exploited now

Acronis records in CISA KEV

TI-2026-59964 Acronis Backup Incorrect Default Permissions Vulnerability CRITICAL 93KEV 2026-09-16 TI-2023-24253 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CRITICAL 100KEV 2024-07-29

Components

Products in the NVD configurations · select one to filter the records

Cyber Protect 86 records HIGH Agent 45 records LOW True Image 25 records LOW Cyber Protect Home Office 22 records MEDIUM Snap Deploy 9 records LOW Cyber Files 5 records LOW Cloud Manager 4 records MEDIUM Cyber Backup 4 records HIGH

Records

25 records in True Image · all components

TI-2017-02423 CVE-2017-3219 · GHSA-67cv-mr76-54w6

Insufficient verification of data authenticity in Acronis True Image

LOW 39

Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00474 Published 2017-06-21 No fix listed CWE-311

TI-2020-15747 CVE-2020-25736 · GHSA-239r-qg7g-cjfp

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege…

LOW 38

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02152 Published 2021-07-15 No fix listed

TI-2021-12253 CVE-2021-32581 · GHSA-6fw4-x9r3-mvgh

Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021…

LOW 36

Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653, Acronis Cyber Protect prior to build 27009 did not implement SSL certificate v…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00726 Published 2021-08-05 No fix listed CWE-295

TI-2020-17851 CVE-2020-35145 · GHSA-x5xg-2928-cq69

Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation…

LOW 35

Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Untrusted Search Path issue.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00576 Published 2021-01-29 No fix listed CWE-427

TI-2021-12252 CVE-2021-32580 · GHSA-75fv-95x6-q4w4

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking.

LOW 34

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00255 Published 2021-08-05 No fix listed CWE-427

TI-2021-12251 CVE-2021-32579 · GHSA-mc6j-mqqm-ccw2

Acronis True Image prior to 2021 Update 4 for Windows and Acronis True Image prior to…

LOW 34

Acronis True Image prior to 2021 Update 4 for Windows and Acronis True Image prior to 2021 Update 5 for macOS allowed an unauthenticated attacker (who has a local code execution ability) to tamper with the micro-service…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00236 Published 2021-08-05 No fix listed CWE-287

TI-2021-12250 CVE-2021-32578 · GHSA-rv9h-9578-p999

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation…

LOW 34

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling (issue 2 of 2).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00234 Published 2021-08-05 No fix listed CWE-610

TI-2021-12248 CVE-2021-32576 · GHSA-259w-fqv8-xvgh

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation…

LOW 34

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling (issue 1 of 2).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00234 Published 2021-08-05 No fix listed CWE-610

TI-2020-12199 CVE-2020-15495 · GHSA-vwx5-g6gg-7w8f

Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation…

LOW 34

Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00256 Published 2021-07-15 No fix listed

TI-2020-08195 CVE-2020-10140 · GHSA-xm7v-g2x4-x85v

Incorrect permission assignment in Acronis True Image

LOW 34

Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00381 Published 2020-10-21 Fixed in 32010 CWE-732

TI-2020-08194 CVE-2020-10139 · GHSA-93hp-mcpj-6329

Improper access control in Acronis True Image 2021

LOW 34

Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00435 Published 2020-10-21 Fixed in 32010 CWE-284

TI-2022-08060 CVE-2022-24115 · GHSA-34f6-pfxg-3464

Improper signature verification in Acronis Cyber Protect Home Office

LOW 33

Local privilege escalation due to unrestricted loading of unsigned libraries.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2022-02-04 Fixed in 39605, 39287 CWE-347

TI-2022-08058 CVE-2022-24113 · GHSA-5h99-pwr2-w237

Incorrect default permissions in Acronis Cyber Protect 15

LOW 33

Local privilege escalation due to excessive permissions assigned to child processes.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00209 Published 2022-02-04 Fixed in 28035, 27147 +2 CWE-250

TI-2021-19898 CVE-2021-44204 · GHSA-v5vh-gq27-ch94

Improper authorization in Acronis Cyber Protect 15

LOW 33

Local privilege escalation via named pipe due to improper access control checks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00197 Published 2022-02-04 Fixed in 28035, 27147 +2 CWE-285

TI-2021-12249 CVE-2021-32577 · GHSA-7g3h-wqj7-92jp

Acronis True Image prior to 2021 Update 5 for Windows allowed local privilege escalation…

LOW 33

Acronis True Image prior to 2021 Update 5 for Windows allowed local privilege escalation due to insecure folder permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00204 Published 2021-08-05 No fix listed CWE-732

TI-2020-12200 CVE-2020-15496 · GHSA-r4hj-jp53-qx72

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions.

LOW 33

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00223 Published 2021-07-15 No fix listed CWE-281

TI-2021-19900 CVE-2021-44206 · GHSA-49vp-rvr9-vh53

Uncontrolled search path in Acronis Cyber Protect Home Office

LOW 32

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00239 Published 2022-02-04 Fixed in 39612, 39287 CWE-427

TI-2021-19899 CVE-2021-44205 · GHSA-4cr8-mrwp-p7xm

Uncontrolled search path in Acronis Cyber Protect Home Office

LOW 32

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00239 Published 2022-02-04 Fixed in 39612, 39287 CWE-427

TI-2026-25686 CVE-2026-33271 · GHSA-2ph3-3852-f6r9

Incorrect permission assignment in Acronis True Image

LOW 30

Local privilege escalation due to insecure folder permissions.

CVSS 3.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00092 Published 2026-04-02 Fixed in 42902 CWE-732

TI-2026-22939 CVE-2026-28728 · GHSA-r5hg-g2g5-9h8f

Uncontrolled search path in Acronis True Image

LOW 30

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.001 Published 2026-04-02 Fixed in 42902 CWE-427

TI-2026-22132 CVE-2026-27774 · GHSA-phg3-8rj7-h8r5

Uncontrolled search path in Acronis True Image

LOW 30

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.001 Published 2026-04-02 Fixed in 42902 CWE-427

TI-2022-08059 CVE-2022-24114 · GHSA-whc8-c4p3-5m9v

Race condition in Acronis Cyber Protect Home Office

LOW 30

Local privilege escalation due to race condition on application startup.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00154 Published 2022-02-04 Fixed in 39605, 39287 CWE-362

TI-2020-15614 CVE-2020-25593 · GHSA-32p2-3fcm-4xgr

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to…

LOW 29

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0025 Published 2021-07-15 No fix listed CWE-276

TI-2008-01230 CVE-2008-1280 · GHSA-hhr2-mpx2-rw5r

Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image…

LOW 28

Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a mal…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02462 Published 2008-03-10 No fix listed CWE-20

TI-2008-01229 CVE-2008-1279 · GHSA-4xjg-cx39-6f72

Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image…

LOW 26

Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a pa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01653 Published 2008-03-10 No fix listed CWE-20

Open these records in search →