Read the docs
TI-2021-14928 Aliases CVE-2021-36808GHSA-62g4-rxq8-8m44

Race condition in Sophos Secure Workspace for Android

Priority LOW 30CWE-362Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115.

Why it matters now

EPSS 0.00257 17th percentileScored 2026-11-07
Fix Fixed Sophos Secure Workspace for Android (Sophos): 9.7.3115

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SophosSophos Secure Workspace for Androidbefore 9.7.31159.7.3115Patch availableCNA
  • Sophos Secure Workspace for Android VendorSophos Affected before 9.7.3115 Fixed in 9.7.3115 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:sophos:sophos_secure_workspace:*:*:*:*:*:android:*:*before 9.7.3115VulnerableSophos
  • cpe:2.3:a:sophos:sophos_secure_workspace:*:*:*:*:*:android:*:* Versions before 9.7.3115 Vulnerable ·Sophos

Remediation

  • Fix · CNA Sophos Secure Workspace for Android (Sophos) Fixed in 9.7.3115

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-36808
  2. 2026-10-03 Alias added: GHSA-62g4-rxq8-8m44

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences