CVE-2025-24828
CVSS 3.0 Score 6.3 of 10 (medium)
Details
Published Jan 31, 2025
CWE ID 426
Summary
CVE-2025-24828 is a local privilege escalation vulnerability affecting Acronis Cyber Protect Cloud Agent for Windows. The issue arises due to a DLL hijacking vulnerability, which allows an attacker to elevate their privileges within the system. This vulnerability can potentially grant unauthorized access and control to malicious actors. Acronis Cyber Protect Cloud Agent versions prior to build 39378 are at risk, making it crucial for affected organizations to update their software as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.