Acronis True Image vulnerabilities

CVE-2026-33271 [MEDIUM] CWE-732 CVE-2026-33271: Local privilege escalation due to insecure folder permissions. The following products are affected: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902.

CVE-2022-24114 [HIGH] CWE-362 CVE-2022-24114: Local privilege escalation due to race condition on application startup. The following products are Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287

CVE-2020-25593 [MEDIUM] CWE-276 CVE-2020-25593: Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions.

CVE-2008-1280 [MEDIUM] CWE-20 CVE-2008-1280: Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Ser Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.

CVE-2008-1279 [MEDIUM] CWE-20 CVE-2008-1279: Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Se Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a packet with an invalid length field, which causes an out-of-bounds read.