CVE-2022-24114CWE-362

CVE-2022-24114: vulnerability in Acronis Cyber Protect Home Office

Local privilege escalation due to race condition on application startup

Published · Updated

Follow this CVE+ Monitor Acronis Cyber Protect Home Office+ Monitor Acronis True Image

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287
Affected products
Acronis · Acronis Cyber Protect Home OfficeAcronis · Acronis True Image 2021
Related CVEs — Acronis Cyber Protect Home Office

In the same product, most dangerous first.

CVE-2022-45451HIGHCVE-2022-45451EPSS 0.5%CVE-2023-41743HIGHCVE-2023-41743EPSS 0.4%CVE-2023-44208HIGHCVE-2023-44208EPSS 0.4%CVE-2023-5042MEDIUMCVE-2023-5042EPSS 0.4%CVE-2023-48677HIGHCVE-2023-48677EPSS 0.2%CVE-2021-44206—Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder serviceEPSS 0.2%