Sophos Endpoint Security vulnerabilities

3 CVEs affecting Sophos Endpoint Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-5647, published 2006-11-01.

More from Sophos.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-5647, published 2006-11-01. Medium severity, CVSS 6.4. EPSS: 21.1% chance of exploitation in the next 30 days. Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service (memory corruption) and…
• CVE-2006-5646, published 2006-11-01. Medium severity, CVSS 5.0. EPSS: 17.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows…
• CVE-2006-5645, published 2006-11-01. Medium severity, CVSS 5.0. EPSS: 17.9% chance of exploitation in the next 30 days. Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause…