CVE-2021-44206CWE-427

CVE-2021-44206: vulnerability in Acronis Cyber Protect Home Office

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service

Published · Updated

Follow this CVE+ Monitor Acronis Cyber Protect Home Office+ Monitor Acronis True Image

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287
Affected products
Acronis · Acronis Cyber Protect Home OfficeAcronis · Acronis True Image 2021
Related CVEs — Acronis Cyber Protect Home Office

In the same product, most dangerous first.

CVE-2022-45451HIGHCVE-2022-45451EPSS 0.5%CVE-2023-41743HIGHCVE-2023-41743EPSS 0.4%CVE-2023-44208HIGHCVE-2023-44208EPSS 0.4%CVE-2023-5042MEDIUMCVE-2023-5042EPSS 0.4%CVE-2023-48677HIGHCVE-2023-48677EPSS 0.2%CVE-2021-44205—Local privilege escalation due to DLL hijacking vulnerabilityEPSS 0.2%