CVE-2020-10551

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-09 · updated 2026-06-17
Weakness: CWE-732

Description

QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\SYSTEM by writing a malicious executable to the location of TsService.

Affected products

Tencent Qqbrowser: before 10.5.3870.400 — fixed in 10.5.3870.400

How to fix

Upgrade to a fixed version: Tencent Qqbrowser 10.5.3870.400. Check the vendor advisory for mitigations.

References

https://github.com/seqred-s-a/CVE-2020-10551
https://seqred.pl/en/cve-2020-10551-privilege-escalation-in-qqbrowser/
https://github.com/seqred-s-a/CVE-2020-10551
https://seqred.pl/en/cve-2020-10551-privilege-escalation-in-qqbrowser/

Get alerted when CVE-2020-10551 or the next vulnerability affects your stack