CVE-2025-7472

A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges, if the installer is run as SYSTEM.

Score

CVSS 3.1 7.5 High

Status

Deferred - security-alert@sophos.com

Published

2025-07-17

Last modified

2025-07-17

Weaknesses

CWE-427

Affected products

• Sophos Intercept X For Windows Installer (Sophos)

References

• https://www.sophos.com/en-us/security-advisories/sophos-sa-20250717-cix-lpe