Local Privilege Escalation Risk in Intercept X for Windows by Sophos

CVE-2024-13972

What is CVE-2024-13972?

A vulnerability exists in the Intercept X for Windows updater that can allow a local user to gain SYSTEM level privileges during a product upgrade due to improperly configured registry permissions. This weakness can be exploited by attackers with local access, enabling them to execute malicious actions with elevated privileges, which may compromise system integrity and security.

News Articles

Cyber Press

CVE-2024-13972CVE-2025-7433

Sophos Intercept X for Windows Vulnerabilities Allow Arbitrary Code Execution

Identified as CVE-2024-13972, CVE-2025-7433, and CVE-2025-7472, each flaw could allow a low-privileged user to gain SYSTEM-level rights on a compromised host.

GBHackers News

CVE-2025-7472CVE-2024-13972

Sophos Intercept X for Windows Flaws Enable Arbitrary Code Execution

Sophos has disclosed three vulnerabilities in its Intercept X for Windows endpoint security solution that could allow attackers to execute arbitrary code.

References