174 CVEs
7 in CISA KEV
Sophos Vulnerabilities
CVE security advisories and vulnerability history for Sophos.
174
Total CVEs
Published
7
In CISA KEV
Exploited in the wild
52
Public exploits
PoC or exploit code
6.9
Avg CVSS
2004–2025
Overview
Sophos has 174 published CVE records since 2004, of which 7 are in CISA's Known Exploited Vulnerabilities catalog and 52 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Sophos products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.