This vulnerability in Acronis True Image (Windows) before build 42902 is caused by improper handling of DLL loading, leading to DLL hijacking (CWE-427). An attacker with local access and limited privileges could exploit this flaw to escalate their privileges on the system. The CVSS vector indicates that exploitation requires local access with high attack complexity and user interaction, but successful exploitation could result in high confidentiality, integrity, and availability impacts.

Successful exploitation could allow an attacker with local access and limited privileges to gain elevated privileges, potentially compromising system confidentiality, integrity, and availability. However, exploitation requires user interaction and has high complexity, reducing the likelihood of widespread impact. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit local access to trusted users only and exercise caution with untrusted files or programs that could trigger DLL hijacking. Monitor Acronis advisories for updates on patches or official mitigations.