Unscored CVE-2020-14418 EUVD-2020-6557GHSA-w3q5-g4xc-24gf

A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occu…

Published Jan 30, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.

References

https://github.com/nettitude/metasploit-modules
https://labs.nettitude.com/blog/cve-2020-14418-madcodehook-library-local-privilege-escalation/