Local Privilege Escalation Risk in Intercept X for Windows by Sophos

CVE-2024-13972

What is CVE-2024-13972?

A vulnerability exists in the Intercept X for Windows updater that can allow a local user to gain SYSTEM level privileges during a product upgrade due to improperly configured registry permissions. This weakness can be exploited by attackers with local access, enabling them to execute malicious actions with elevated privileges, which may compromise system integrity and security.

References