CVE-2020-10551

CVE-2020-10551 describes a local privilege escalation vulnerability affecting Tencent QQBrowser versions prior to 10.5.3870.400. The vulnerability stems from the TsService.exe Windows service, which is installed with insecure permissions allowing any authenticated user to write to its location. This flaw enables a local attacker to replace the legitimate service executable with a malicious one, leading to arbitrary code execution with NT AUTHORITY\SYSTEM privileges. While rated with a CVSS score of 7.8 (High), indicating significant potential impact, there is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.