CVE-2020-14418

7.0 highEPSS 0.4%

High (7.0). EPSS 0.4% chance of exploitation in the next 30 days.

A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.

Severity

CVSS 3.1

7.0 high

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-367
Published: 2021-01-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:advanced_malware_protection
madshi:madcodehook
morphisec:unified_threat_prevention_platform

References

https://github.com/nettitude/metasploit-modules
https://labs.nettitude.com/blog/cve-2020-14418-madcodehook-library-local-privilege-escalation/
https://github.com/nettitude/metasploit-modules
https://labs.nettitude.com/blog/cve-2020-14418-madcodehook-library-local-privilege-escalation/

Check your stack JSON