Sophos Intercept X vulnerabilities

3 CVEs affecting Sophos Intercept X, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-8885, published 2024-10-02.

More from Sophos.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-25264, published 2021-05-17. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges.
• CVE-2021-25266, published 2022-04-27. Low severity, CVSS 3.9. EPSS: 0.2% chance of exploitation in the next 30 days. An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and…
• CVE-2024-8885, published 2024-10-02. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 and older allows writing of arbitrary files.