Acronis Products Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Acronis DeviceLock DLP (Windows) versions prior to build 9.0.93212 and Acronis Cyber Protect Cloud Agent (Windows) versions prior to build 42183. This vulnerability arises from improper input validation, which could be exploited to gain elevated privileges on the affected system.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling a user to gain elevated rights on the system.

Remediation

Users can update to Acronis DeviceLock DLP 9.0 Update 6 or Acronis Cyber Protect Cloud Agent update C26.03 to address this vulnerability.