CVE Catalog

CVE-2026-33271

MediumCVSS 6.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.09%

0th percentile - higher than 0% of all known CVEs

Summary

Acronis True Image for Windows before build 42902 has a local privilege escalation vulnerability due to insecure folder permissions.

Risk Assessment

The organization is at risk that an unprivileged local user may gain elevated privileges, potentially leading to full system compromise.

Recommendation

Update Acronis True Image to build 42902 or later, which fixes this vulnerability.

Original NVD description (English source)

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 42902.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS