CVE-2020-18174: Autohotkey

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A process injection vulnerability in setup.exe of AutoHotkey 1.1.32.00 allows attackers to escalate privileges.

Affected products

• Autohotkey Autohotkey: version 1.1.32.00 only

Published 2021-07-26. Last modified 2026-06-17.