7.5High

CVE-2025-7472

Sophos Sophos Intercept X for Windows Installer Published: (1 year ago)

Description

A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges, if the installer is run as SYSTEM.

Weakness (CWE): CWE-427

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Sophos Sophos Intercept X for Windows Installer < 1.22

References and patches