CVE-2010-2308: Sophos Anti-Virus

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.

Affected products

• Sophos Anti-Virus: up to and including 7.6.19; version 3.4.6 only; version 3.78 only; version 3.78d only; version 3.79 only; version 3.80 only; …

Published 2010-06-16. Last modified 2026-06-16.