QQBrowser Elevation of Privilege Vulnerability

Tencent QQBrowser is a Web browser from Tencent, a Chinese company. A security vulnerability exists in Tencent QQBrowser versions prior to 10.5.3870.400, which originates from the NT AUTHORITYAuthenticated Users group, where a person can write the TsService.exe file. A local attacker can exploit...

Code injection

QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\SYSTEM by writi...