CVE-2022-24113: Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows)…

PriorityP338high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.21%

11.1th percentile

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

Affected

7 ranges

Vendor	Product	Version range	Fixed in
acronis	acronis_agent	>= unspecified < 27147	27147
acronis	acronis_cyber_protect_15	>= unspecified < 28035	28035
acronis	acronis_cyber_protect_home_office	>= unspecified < 39612	39612
acronis	acronis_true_image_2021	>= unspecified < 39287	39287
acronis	agent	< c21.06	c21.06
acronis	cyber_protect	—	—
acronis	true_image	—	—

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.