High · 8.8 CVE-2025-7433 EUVD-2025-21810GHSA-m7vq-cpcq-942m

A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older allows arbitra…

Published Jul 17, 2025 · Updated Jul 17, 2025 · Assigned by Sophos

Vendor: Sophos Product: Sophos Intercept X for Windows Platform: Windows Category: Network devices

Description

A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older allows arbitrary code execution.

Affected products

Vendor	Product	Affected	Fixed
Sophos	Sophos Intercept X for Windows	< 2025.1	2025.1

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20250717-cix-lpe