CVE-2020-10551

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\SYSTEM by writing a malicious executable to the location of TsService.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Apr 9, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-105528.1An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke afteCVE-2020-105535.5An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen (aka screeCVE-2020-105547.5An issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored in the database in an obfuscated format, whiCVE-2020-105578.8An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload CVE-2020-105586.5The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process seCVE-2020-10565.4An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attCVE-2020-105605.9An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can bCVE-2020-105619.8An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138. Injecting parameters to ippserver through the web management backgrouCVE-2020-105627.2An issue was discovered in DEVOME GRR before 3.4.1c. admin_edit_room.php mishandles file uploads.CVE-2020-105639.8An issue was discovered in DEVOME GRR before 3.4.1c. frmcontactlist.php mishandles a SQL query.CVE-2020-105649.8An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by upCVE-2020-105657.8grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (
CVE-2020-10551: High severity, CVSS 7.8 | Vulnix