Read the docs
TI-2021-07522 Aliases CVE-2021-25270GHSA-q74q-jq9c-493q

A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901.

Priority LOW 29Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901.

Why it matters now

EPSS 0.00264 18th percentileScored 2026-11-07
Fix Fixed HitmanPro.Alert (Sophos): 901

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SophosHitmanPro.Alertbefore 901901Patch availableCNA
  • HitmanPro.Alert VendorSophos Affected before 901 Fixed in 901 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:sophos:hitmanpro.alert:*:*:*:*:*:*:*:*before 901VulnerableSophos
  • cpe:2.3:a:sophos:hitmanpro.alert:*:*:*:*:*:*:*:* Versions before 901 Vulnerable ·Sophos

Remediation

  • Fix · CNA HitmanPro.Alert (Sophos) Fixed in 901

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-25270
  2. 2026-10-03 Alias added: GHSA-q74q-jq9c-493q

References

Advisory 1

  • TI-2018-02939 An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler… CVSS 3.1HIGH 7.8
  • TI-2020-07630 Sophos HitmanPro.Alert before build 861 allows local elevation of privilege. CVSS 3.1HIGH 7.8
  • TI-2018-02938 Use of uninitialized resource in Talos Sophos CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences