CVE-2025-11178

High

Description

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis True Image for Western Digital (Windows) before build 42636, Acronis True Image for SanDisk (Windows) before build 42679, Acronis True Image OEM (Windows) before build 42575.

SeverityHigh

CVSS7.3

Exploit probability—

ProductAcronis True Image

PublishedSep 30, 2025

First seenSep 30, 2025

Weakness typeCWE-427CWE-427

How to fix

Update

Acronis Acronis True Image42386 or later
Acronis Acronis True Image for Western Digital42636 or later
Acronis Acronis True Image for SanDisk42679 or later
Acronis Acronis True Image OEM42575 or later

Vendor advisories

security-advisory.acronis.com/advisories/SEC-7078

Affected products

Product	Affected versions	Fixed in
Acronis Acronis True Image	v < 42386	42386
Acronis Acronis True Image for Western Digital	v < 42636	42636
Acronis Acronis True Image for SanDisk	v < 42679	42679
Acronis Acronis True Image OEM	v < 42575	42575

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.