High severity8.8NVD Advisory· Published Jul 17, 2025· Updated Apr 15, 2026

CVE-2024-13972

Description

A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privileges during a product upgrade.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sophos/Intercept X for Windowsllm-fuzzy
Range: < 2024.3.2 (Core Agent)

Patches

Vulnerability mechanics

References

www.sophos.com/en-us/security-advisories/sophos-sa-20250717-cix-lpenvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000