Sophos Intercept X / Central Vulnerabilities & Security Advisories
6 advisories tracked · Sophos ([email protected] CNA) via NVD · 0 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Sophos advisory that VulniPulse classified as Intercept X / Central, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 4 high, 1 medium, 1 low.
Android app · Google Play
Monitor Sophos CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Sophos ([email protected] CNA) via NVD
Sophos is its own CVE Numbering Authority. VulniPulse ingests Sophos's CVEs from the NVD CNA feed ([email protected]), each linking to its sophos.com advisory. Covers Sophos Firewall (XG/XGS, SFOS), Intercept X / Sophos Central endpoint, Sophos UTM, Sophos Mobile, Sophos Connect VPN and the Web/Email appliances — its firewalls are a repeated mass-exploitation target (the 'Pacific Rim' campaign), so an MSP-heavy, alert-hungry community.
Latest Sophos Intercept X / Central advisories
High [CVE-2025-7433] local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older
A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older allows arbitrary code execution.
High [CVE-2025-7472] local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can
A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges, if the installer is run as SYSTEM.
High [CVE-2024-13972] vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can
A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privileges during a product upgrade.
High [CVE-2024-8885] local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 and older
A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 and older allows writing of arbitrary files.
Low [CVE-2021-25266] Intercept X: insecure data storage vulnerability
An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile (Android) before version 9.7.3495.
Medium [CVE-2021-25269] Intercept X: local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path…
A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.