CVE-2025-7433

Published: Jul 17, 2025Modified: Jun 17, 2026Deferred

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: security-alert@sophos.com (Secondary)

Description

A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older allows arbitrary code execution.

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (1)

https://www.sophos.com/en-us/security-advisories/sophos-sa-20250717-cix-lpe

Source: security-alert@sophos.com

Timeline

No history available yet.