This vulnerability in Acronis True Image (Windows) before build 42902 involves DLL hijacking, classified under CWE-427. An attacker with local access could exploit this flaw to escalate privileges on the affected system. The CVSS 3.0 vector indicates the attack requires local access, high attack complexity, low privileges, and user interaction, with impacts on confidentiality, integrity, and availability rated high. No patch or vendor advisory details are currently available to confirm remediation status.

Successful exploitation could allow a local attacker to gain elevated privileges, potentially compromising system confidentiality, integrity, and availability. However, exploitation requires local access and user interaction, and no active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users and monitor for suspicious activity related to DLL loading. Avoid running untrusted applications that could exploit DLL hijacking.