CVE-2024-8885 HIGH

CVE-2024-8885

Vendor Sophos

Product Sophos Intercept X

Weakness CWE-1104

Published October 2, 2024

Last update October 2, 2024

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 and older allows writing of arbitrary files.

Key dates

02Disclosure timeline

October 2, 2024 CVE published

October 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-8885 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1104.html

Related vulnerabilities

04Related CVE

CVE-2023-37524 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service CVE-2025-12104 Incorrect Content-Type Header CVE-2021-22142 Kibana Reporting vulnerabilities CVE-2025-55277 HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability CVE-2026-21821 HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery