A process injection vulnerability in setup.exe of AutoHotkey 1.1.32.00 allows attackers to escalate privileges.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18174
Reference (s):
- https://github.com/GitHubAssessments/CVE_Assessments_02_2020