Page 1 of 1

Sophos Intercept X for Windows Flaws Enable Arbitrary Code Execution

Posted: Sat Jul 19, 2025 1:33 pm
by Shane1145
Sophos has disclosed three critical security vulnerabilities in its Intercept X for Windows endpoint security solution that could allow attackers to execute arbitrary code and gain system-level privileges on affected systems.

The vulnerabilities, designated CVE-2024-13972, CVE-2025-7433, and CVE-2025-7472, all carry high severity ratings and affect different components of the security software including the updater, Device Encryption module, and installer.

https://gbhackers.com/sophos-intercept- ... ows-flaws/