Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-25264 Details

In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.7 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://community.sophos.com/b/security-blog	CVE	Vendor Advisory
https://community.sophos.com/b/security-blog/posts/resolved-lpe-in-endpoint-for-macos-cve-2021-25264	CVE	Vendor Advisory
https://community.sophos.com/b/security-blog	[email protected]	Vendor Advisory
https://community.sophos.com/b/security-blog/posts/resolved-lpe-in-endpoint-for-macos-cve-2021-25264	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Product	Versions
sophos home	<= 10.0.3
CPE cpe:2.3:a:sophos:home::::::macos::* Remediation No remediation found in references.
sophos intercept x	<= 9.10.1 <= 10.0.3
CPE cpe:2.3:a:sophos:intercept_x:::::opm:macos:: cpe:2.3:a:sophos:intercept_x:::::central:macos:: Remediation No remediation found in references.

6 change records found show changes

QUICK INFO