CVE-2025-7779

published 2025-09-30

CVE-2025-7779: Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389…

Priority P3 44 high 8.8 CVSS 3.0

AV L AC L PR L UI N S C C H I H A H

Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS) before build 42197, Acronis True Image OEM (macOS) before build 42571.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
acronis	acronis_true_image	>= unspecified < 42389	42389
acronis	acronis_true_image_for_sandisk	>= unspecified < 42198	42198
acronis	acronis_true_image_for_western_digital	>= unspecified < 42197	42197
acronis	acronis_true_image_oem	>= unspecified < 42571	42571

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269