CVE-2020-10551
High
Description
QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\SYSTEM by writing a malicious executable to the location of TsService.
SeverityHigh
CVSS7.8
Exploit probability—
ProductTencent Qqbrowser
PublishedApr 9, 2020
First seenApr 9, 2020
How to fix
Update
- tencent qqbrowser10.5.3870.400 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tencent qqbrowser | v < 10.5.3870.400 | 10.5.3870.400 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.