Acronis Cyber Protect Home Office — known CVE vulnerabilities

Every CVE whose affected-product data names Acronis Cyber Protect Home Office, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (22)

• CVE-2023-44208 — CVSS 9.1 (critical): Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect…
• CVE-2023-48677 — CVSS 7.8 (high): Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office…
• CVE-2023-41743 — CVSS 7.8 (high): Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber…
• CVE-2022-44747 — CVSS 7.8 (high): Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office…
• CVE-2022-45451 — CVSS 7.8 (high): Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber…
• CVE-2022-45455 — CVSS 7.8 (high): Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office…
• CVE-2022-46868 — CVSS 7.8 (high): Local privilege escalation during recovery due to improper soft link handling. The following products are affected: Acronis Cyber Protect…
• CVE-2022-46869 — CVSS 7.8 (high): Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber…
• CVE-2022-24113 — CVSS 7.8 (high): Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber…
• CVE-2022-24115 — CVSS 7.8 (high): Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect…
• CVE-2022-4418 — CVSS 7.8 (high): Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect…
• CVE-2022-44732 — CVSS 7.8 (high): Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office…
• CVE-2022-44733 — CVSS 7.8 (high): Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office…
• CVE-2021-44204 — CVSS 7.8 (high): Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect…
• CVE-2023-5042 — CVSS 7.5 (high): Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office…
• CVE-2021-44206 — CVSS 7.3 (high): Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products are affected…
• CVE-2021-44205 — CVSS 7.3 (high): Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office…
• CVE-2022-44744 — CVSS 7.3 (high): Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office…
• CVE-2022-24114 — CVSS 7.0 (high): Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home…
• CVE-2022-44745 — CVSS 5.5 (medium): Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build…
• CVE-2021-44199 — CVSS 5.5 (medium): DLL hijacking could lead to denial of service. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035…
• CVE-2022-44746 — CVSS 5.5 (medium): Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office…