CVE-2025-24830

Summary

CVE-2025-24830 is a local privilege escalation vulnerability that arises due to a DLL hijacking issue. This weakness affects the Acronis Cyber Protect Cloud Agent for Windows, with versions before build 39378 being vulnerable. An attacker who successfully exploits this vulnerability gains elevated system privileges, potentially leading to serious security consequences. The DLL hijacking vulnerability enables an attacker to replace a legitimate DLL with a malicious one, allowing for unauthorized code execution with heightened privileges. Organizations using the Acronis Cyber Protect Cloud Agent on Windows systems should promptly update to the latest build to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.