CVE-2025-11178

published 2025-09-30

CVE-2025-11178: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis…

Priority P3 37 high 7.3 CVSS 3.0

AV L AC L PR L UI R S U C H I H A H

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis True Image for Western Digital (Windows) before build 42636, Acronis True Image for SanDisk (Windows) before build 42679, Acronis True Image OEM (Windows) before build 42575.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
acronis	acronis_true_image	>= unspecified < 42386	42386
acronis	acronis_true_image_for_sandisk	>= unspecified < 42679	42679
acronis	acronis_true_image_for_western_digital	>= unspecified < 42636	42636
acronis	acronis_true_image_oem	>= unspecified < 42575	42575

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-427