CVE-2021-44204

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-285

Affected software

No affected versions have been published.

Timeline

Published: Feb 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-442057.3Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windo CVE-2021-442067.3Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products are affected: Acronis CVE-2021-442078.1Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.CVE-2021-442086.1OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat.CVE-2021-442096.1OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO.CVE-2021-44214.3The Advanced Popups plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.1. This is due to CVE-2021-442106.1OX App Suite through 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data.CVE-2021-442115.4OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature.CVE-2021-442126.1OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring.CVE-2021-442136.1OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message.CVE-2021-442155.5Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecifi CVE-2021-442165.5Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to