CVE-2026-42061
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability in Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227 allows local privilege escalation due to excessive permissions assigned to child processes.
Risk Assessment
A local attacker can gain elevated privileges, potentially leading to full system compromise.
Recommendation
Update Acronis DeviceLock DLP to version 9.0.15051.93227 or later.
Other vulnerabilities in Acronis DeviceLock DLP
See all- CVE-2026-50033High
Acronis DeviceLock DLP for Windows prior to build 9.0.15051.93227 is vulnerable to local privilege escalation via DLL hijacking.
- CVE-2026-44682High
Local privilege escalation due to DLL hijacking vulnerability. Affects Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
- CVE-2026-44609High
Local privilege escalation due to EXE hijacking vulnerability in Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Original NVD description (English source)
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.