CVE-2020-24955

7.8 highEPSS 0.9%

High (7.8) in superantispyware professional x. EPSS 0.9% chance of exploitation in the next 30 days.

SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as malware.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2020-09-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

superantispyware:professional_x

References

https://github.com/b1nary0x1
https://www.youtube.com/watch?v=jdcqbev-H5I
https://github.com/b1nary0x1
https://www.youtube.com/watch?v=jdcqbev-H5I

Check your stack JSON