CVE-2024-8885

Summary

CVE-2024-8885 is a newly discovered privilege escalation vulnerability that affects Sophos Intercept X for Windows with Central Device Encryption version 2024.2.0 and older. This issue grants an attacker local access to write arbitrary files, potentially allowing them to elevate their privileges and gain unauthorized administrative control on the affected system. By exploiting this vulnerability, an attacker can execute malicious code and compromise the security of the system. Users are advised to update their Sophos Intercept X software to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.