CVE-2020-10139

CVE-2020-10139 is a privilege escalation vulnerability affecting Acronis True Image 2021. It allows an unprivileged Windows user to achieve arbitrary code execution with SYSTEM privileges by creating a specially-crafted OpenSSL configuration file in a predictable path that a privileged service then uses. The vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has received some community discussion and media coverage, including a SecurityWeek article.