Read the docs
TI-2021-07523 Aliases CVE-2021-25271GHSA-qmxj-g74m-j3gh

A local attacker could read or write arbitrary files with administrator privileges in…

Priority LOW 26Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318.

Why it matters now

EPSS 0.00229 13th percentileScored 2026-11-07
Fix Fixed HitmanPro (Sophos): 318

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SophosHitmanProbefore 318318Patch availableCNA
  • HitmanPro VendorSophos Affected before 318 Fixed in 318 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:sophos:hitmanpro:*:*:*:*:*:*:*:*before 318VulnerableSophos
  • cpe:2.3:a:sophos:hitmanpro:*:*:*:*:*:*:*:* Versions before 318 Vulnerable ·Sophos

Remediation

  • Fix · CNA HitmanPro (Sophos) Fixed in 318

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-25271
  2. 2026-10-03 Alias added: GHSA-qmxj-g74m-j3gh

References

Advisory 1

  • TI-2017-03919 A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before… CVSS 3.0HIGH 7.8
  • TI-2017-05093 In Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert… CVSS 3.0HIGH 7.8
  • TI-2017-03918 A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before… CVSS 3.0MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences