CVE-2026-50033

HighCVSS 7.3

Published: 03/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Acronis DeviceLock DLP for Windows prior to build 9.0.15051.93227 is vulnerable to local privilege escalation via DLL hijacking.

Risk Assessment

A local attacker can gain elevated privileges on the system, threatening data confidentiality, integrity, and system stability.

Recommendation

Update Acronis DeviceLock DLP to build 9.0.15051.93227 or later.

Other vulnerabilities in Acronis DeviceLock DLP

See all

CVE-2026-44682High
Local privilege escalation due to DLL hijacking vulnerability. Affects Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
CVE-2026-44609High
Local privilege escalation due to EXE hijacking vulnerability in Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
CVE-2026-42061High
A vulnerability in Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227 allows local privilege escalation due to excessive permissions assigned to child processes.

Original NVD description (English source)

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.