Sophos Intercept X for Windows Installer Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in the Sophos Intercept X for Windows installer, affecting versions prior to 1.22. This vulnerability allows a local user to gain system-level privileges if the installer is executed with SYSTEM rights.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing a local user to execute actions with system-level rights.

Remediation

Users are advised to upgrade to Sophos Intercept X for Windows Installer version 1.22 or later. For new deployments, replace any existing copies of the installer with one downloaded from Sophos Central after March 6, 2025.