← Back

CVE-2021-38086

nvd nist
Published: Aug 12, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking.

Affected (3)

Acronis
1 product
Cyber Protect
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acronis
Cyber Protect
Before 15
Cyber Protect
Version 15
Cyber Protect
Version 15 update1
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-427
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.