CVE-2026-44682
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Local privilege escalation due to DLL hijacking vulnerability. Affects Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Risk Assessment
A local user can gain elevated privileges, potentially leading to full system compromise.
Recommendation
Update Acronis DeviceLock DLP to version 9.0.15051.93227 or later.
Other vulnerabilities in Acronis DeviceLock DLP
See all- CVE-2026-50033High
Acronis DeviceLock DLP for Windows prior to build 9.0.15051.93227 is vulnerable to local privilege escalation via DLL hijacking.
- CVE-2026-44609High
Local privilege escalation due to EXE hijacking vulnerability in Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
- CVE-2026-42061High
A vulnerability in Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227 allows local privilege escalation due to excessive permissions assigned to child processes.
- CVE-2026-25852Medium
Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212.
Original NVD description (English source)
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS