Acronis DeviceLock DLP for Windows contains a flaw that allows a local user to gain elevated privileges by exploiting child processes that run with excessive permissions. The vulnerability arises from misconfigured privilege assignment in process creation, permitting a local attacker to execute code with higher authority than intended. This impacts confidentiality, integrity, and availability by enabling unauthorized modification or execution of system resources confined to the malicious user.

The affected product is Acronis DeviceLock DLP for Windows, specifically builds prior to 9.0.15051.93227. All installations on Windows systems that have not upgraded beyond this build are vulnerable.

The CVSS base score of 7.3 indicates high severity. EPSS is not available, so the data set does not provide an exploitation probability metric. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires local access and does not need network exposure; a local adversary can invoke the affected child process to elevate privileges. The nature of the flaw is a CWE‑250 (Insecure Permissions) attack.