CVE-2023-48677

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-12 · updated 2026-06-17
Weakness: CWE-427

Description

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows) before build 42575.

Affected products

Acronis Cyber Protect Home Office: before 40901 — fixed in 40901

How to fix

Upgrade to a fixed version: Acronis Cyber Protect Home Office 40901. Check the vendor advisory for mitigations.

References

https://security-advisory.acronis.com/advisories/SEC-5620
https://security-advisory.acronis.com/advisories/SEC-5620

Get alerted when CVE-2023-48677 or the next vulnerability affects your stack