CVE-2024-55542

Summary

CVE-2024-55542 is a newly disclosed local privilege escalation vulnerability that affects Acronis Cyber Protect versions 16 (for Linux, macOS, and Windows) prior to build 39169, and Acronis Cyber Protect Cloud Agent for Linux, macOS, and Windows before build 35895. The vulnerability stems from excessive permissions assigned to the Tray Monitor service, which allows an attacker to elevate their privileges and gain unauthorized access to sensitive system data or make unintended modifications. Successful exploitation of this vulnerability could potentially lead to significant security risks, highlighting the importance of applying the relevant patches or updates to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.