CVE-2024-0788 MEDIUM

CVE-2024-0788: SUPERAntiSpyware Pro X v10.0.1260 - Kernel-level API parameters manipulation

Vendor Superantispyware

Product SUPERAntiSpyware Pro X

Weakness CWE-96

Published January 29, 2024

Last update May 20, 2025

View on NVD All CVEs

CVSS base score

6.6/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

What the vulnerability does

01Description

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver.

Key dates

02Disclosure timeline

January 29, 2024 CVE published

May 20, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-0788 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/96.html AskarLabs — CWE-96 write-up Improper Neutralization of Directives in Statically Included Code ('Static Code Injection')

Related vulnerabilities

04Related CVE

CVE-2024-13264 Opigno module - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-028 CVE-2024-13265 Opigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029 CVE-2024-13267 Opigno TinCan Question Type - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-031 CVE-2025-7825 Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.3.2 - Authenticated (Contributor+) Object Instantiation CVE-2024-13263 Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027