CVE-2021-25264: Sophos Home

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges.

Affected products

• Sophos Home: up to and including 10.0.3
• Sophos Intercept X: up to and including 9.10.1; up to and including 10.0.3

Published 2021-05-17. Last modified 2026-06-17.