High severity · published Aug 12, 2021
CVE-2021-38086
Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Cyber Protect · Acronis
before 15; 15; 15 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-38086
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-38086
Vendor Advisory
https://kb.acronis.com/content/68564
More from Cyber Protect
10.0
CVE-2025-30416
Sensitive data disclosure and manipulation due to missing authorization
10.0
CVE-2025-30412
Sensitive data disclosure and manipulation due to improper authentication
10.0
CVE-2025-30411
Sensitive data disclosure and manipulation due to improper authentication
9.8
CVE-2026-28710
Sensitive information disclosure and manipulation due to improper authentication
9.1
CVE-2024-49388
Sensitive information manipulation due to improper authorization