CVE-2020-24955: Superantispyware Professional X

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as malware.

Affected products

• Superantispyware Professional X: before 10.0.1206 (fixed in 10.0.1206)

Published 2020-09-01. Last modified 2026-06-17.