PT-2026-35921

CVE-2026-25852

·

Published

2026-04-29

·

Updated

2026-04-29

Description by

CVSS 3.1
6.7
Medium
MetricsAV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Acronis DeviceLock DLP (Windows) versions prior to 9.0.93212
Description Local privilege escalation is possible due to a DLL hijacking issue. DLL hijacking occurs when an application loads a malicious dynamic-link library (DLL) instead of the intended one, allowing an attacker to execute code with elevated privileges.
Recommendations Update to build 9.0.93212 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-427: Uncontrolled Search Path Element
Related identifiers
CVE-2026-25852
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com