AOMEI vulnerabilities
We track 6 vulnerabilities in AOMEI products across 5 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on June 21, 2026.
Latest AOMEI vulnerabilities
- 7.8 High severity
Backupper: Incorrect Privilege Assignment
A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. T
- 7.8 High severity
Dynamic Disk Manager: Incorrect Privilege Assignment
A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the library ddmdrv.sys of the component Kernel Driver. Performing a manipulation results in improper access controls. The attack must be initia
- 7.8 High severity
Partition Assistant: Incorrect Privilege Assignment
A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in the library ampa10.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack must be carried out loc
- 7.3 High severity
Backupper Workstation: Improper Link Resolution Before File Access
AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AOMEI Backupper Workstation. An attacker must first obtain the ability to execute
- 9.8 Critical severity
Cyber Backup: Missing Authentication for Critical Functionality
AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit
- 9.8 Critical severity
Cyber Backup: Missing Authentication for Critical Functionality
AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit