Local Privilege Escalation in Acronis DeviceLock DLP

Publication date: 2026-06-03

Last updated on: 2026-06-04

Assigner: Acronis International GmbH

Description

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-03

Last Modified

2026-06-04

Generated

2026-07-14

AI Q&A

2026-06-03

EPSS Evaluated

2026-07-12

NVD

CVE-2026-50033

Affected Vendors & Products

Vendor	Product	Version / Range
acronis	devicelock_dlp	to 9.0.15051.93227 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability is a local privilege escalation issue caused by DLL hijacking. It affects Acronis DeviceLock DLP (Windows) versions before build 9.0.15051.93227. DLL hijacking occurs when a malicious DLL is loaded by a program instead of the legitimate one, allowing an attacker with limited access to escalate their privileges on the affected system.

Impact Analysis

The vulnerability can allow an attacker with local access and limited privileges to escalate their privileges to a higher level. This means the attacker could gain greater control over the affected system, potentially leading to unauthorized access to sensitive data, system modifications, or disruption of services.

Hi! I’m here to help you understand CVE-2026-50033. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70