CVE-2020-9363

CVE-2020-9363 describes a virus-detection bypass vulnerability in the Sophos AV parsing engine, affecting various Sophos products including Endpoint Protection, Cloud Optix, and Intercept X. This high-severity vulnerability (CVSS 7.8) could allow an attacker to bypass detection via a crafted ZIP archive, potentially leading to high impact on confidentiality, integrity, and availability if the malicious content is extracted. Despite the vendor's assertion that endpoint products would detect the virus upon extraction, the initial bypass remains a concern. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.