Local Privilege Escalation in Acronis DeviceLock DLP by Acronis
CVE-2026-44682

7.3HIGH

Key Information:

Vendor

Acronis
Status
Acronis Devicelock Dlp
Vendor
CVE Published:
3 June 2026

What is CVE-2026-44682?

A vulnerability has been identified in Acronis DeviceLock DLP on Windows that allows local privilege escalation through DLL hijacking. This security flaw can be exploited by attackers to gain unauthorized access to system-level privileges, which may lead to further compromise of the affected system. Users are advised to update to version 9.0.15051.93227 or later to mitigate this risk.

Affected Version(s)

Acronis DeviceLock DLP Windows < 9.0.15051.93227

References

https://security-advisory.acronis.com/advisories/SEC-11249
vendor-advisory

CVSS V3.0

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.