CVEvulnerability

CVE-2026-18367

9.3 CRITICAL Published 2026-08-06 Modified 2026-09-01 Official page ↗
Status
Awaiting Analysis
Published
2026-08-06
Last modified
2026-09-01
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.3 CRITICAL — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-285

Description

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6.

Related

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References