CVE-2020-10947

HIGH 8.8CVE-2020-10947 · Published 17/04/2020 · updated 17/06/2026

In short

CVE-2020-10947 is a HIGH (CVSS 8.8) vulnerability affecting anti-virus for sophos central (sophos), anti-virus for sophos home (sophos).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.9% of all vulnerabilities.
Fix: update to 9.9.6, 2.2.6 or later.

Package	Affected versions	Patched versions
anti-virus for sophos central sophos	`< 9.9.6`	`9.9.6`
anti-virus for sophos home sophos	`< 2.2.6`	`2.2.6`

Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.