CVE-2021-44206: Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-02-04 · updated 2026-06-17
Weakness: CWE-427

Description

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

Affected products

Acronis Cyber Protect Home Office: all versions
Acronis True Image: 2021, 2021-update_1, 2021-update_2, 2021-update_3, 2021-update_4

References

https://security-advisory.acronis.com/advisories/SEC-3058
https://security-advisory.acronis.com/advisories/SEC-3058

Get alerted when CVE-2021-44206 or the next vulnerability affects your stack