CVE-2025-7472 — Sophos / Sophos Intercept X for Windows Installer

CVE-2025-7472

Sophos / Sophos Intercept X for Windows Installer PUBLISHED

Description (CNA)

A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges, if the installer is run as SYSTEM.

Affected (CNA)

Vendor / product	Versions
Sophos / Sophos Intercept X for Windows Installer	affected 0 before 1.22

CWE

CWE-427

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20250717-cix-lpe

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.