BaseFortify

Publication date: 2025-09-30

Last updated on: 2026-04-10

Assigner: Acronis International GmbH

Description

Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS) before build 42197, Acronis True Image OEM (macOS) before build 42571.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-09-30

Last Modified

2026-04-10

Generated

2026-07-06

AI Q&A

2025-09-30

EPSS Evaluated

2026-07-05

NVD

CVE-2025-7779

Affected Vendors & Products

Vendor	Product	Version / Range
acronis	true_image	*
acronis	true_image_for_sandisk	*
acronis	true_image_for_western_digital	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability is a local privilege escalation caused by an insecure configuration of an XPC service in certain versions of Acronis True Image for macOS. It allows a local user to gain higher privileges than intended.

Impact Analysis

If exploited, this vulnerability can allow an attacker with local access to escalate their privileges, potentially gaining full control over the affected system, leading to compromise of confidentiality, integrity, and availability.

Hi! I’m here to help you understand CVE-2025-7779. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70