Acronis True Image OEM vulnerabilities

10 known vulnerabilities in Acronis True Image OEM from Acronis. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Acronis True Image OEM: External Control of System or Configuration Setting

  CVE-2026-33092Apr 10, 2026Acronis

  Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902.

• 8.8 High severity

  Acronis True Image: Improper Privilege Management

  CVE-2025-7779Sep 30, 2025Acronis

  Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS)

• 7.3 High severity

  Acronis True Image: Uncontrolled Search Path Element

  CVE-2025-11178Sep 30, 2025Acronis

  Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis True Image for Western Digital (Windows) before build 42636, Acronis True Image for SanDisk (Windows) b

• 7.8 High severity

  Acronis True Image: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-34013Jul 18, 2024Acronis

  Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) before build 41396, Acronis True Image OEM (macOS) before build 42571.

• 8.2 High severity

  Acronis Cyber Protect Cloud Agent: Unquoted Search Path or Element

  CVE-2024-34010Apr 29, 2024Acronis

  Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) befor

• 7.8 High severity

  Acronis Cyber Protect Home Office: Uncontrolled Search Path Element

  CVE-2023-48677Dec 12, 2023Acronis

  Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Window

• 9.1 Critical severity

  Acronis Cyber Protect Home Office: Missing Authorization

  CVE-2023-44208Oct 4, 2023Acronis

  Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Windows) before build 42575.

• 7.5 High severity

  Acronis Cyber Protect Home Office: Incorrect Default Permissions

  CVE-2023-5042Sep 20, 2023Acronis

  Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Windows) before build 42575.

• 7.8 High severity

  Acronis Cyber Protect Home Office: Improper Link Resolution Before File Access

  CVE-2022-46869Aug 31, 2023Acronis

  Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis True Image OEM (Windows) before build 42575.

• 7.8 High severity

  Acronis Cyber Protect Home Office: Improper Privilege Management

  CVE-2023-41743Aug 31, 2023Acronis

  Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Protect Cloud Agent (Windows) before build 31637, Acronis Cyber