Sophos Intercept X — known CVE vulnerabilities

Every CVE whose affected-product data names Sophos Intercept X, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-25264 — CVSS 6.7 (medium): In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges.
• CVE-2021-25266 — CVSS 3.9 (low): An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in…