CVE-2020-10140: Acronis True Image

High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramData\Acronis, an unprivileged user can achieve arbitrary code execution with SYSTEM privileges by placing a DLL in one of several paths within C:\ProgramData\Acronis.

Affected products

• Acronis True Image: version 2021 only

Published 2020-10-21. Last modified 2026-06-17.