What’s Vulnerable › Vulnerabilities

CVE-2020-25736

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-07-15 · updated 2026-06-17

Description

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration.

Affected products

• Acronis True Image: 2019-1, 2019-2, 2019-3, 2020, 2021-1

References

• http://packetstormsecurity.com/files/170246/Acronis-TrueImage-XPC-Privilege-Escalation.html
• https://kb.acronis.com/content/68061
• https://www.acronis.com/en-us/blog/
• http://packetstormsecurity.com/files/170246/Acronis-TrueImage-XPC-Privilege-Escalation.html
• https://kb.acronis.com/content/68061
• https://www.acronis.com/en-us/blog/

Get alerted when CVE-2020-25736 or the next vulnerability affects your stack