CVE-2023-34312

CVE-2023-34312 affects Tencent QQ (versions up to 9.7.8.29039) and TIM (up to 3.4.7.22084). The issue is a write-what-where condition caused by QQProtect.exe and QQProtectEngine.dll not validating pointers from inter-process communication, enabling a local breach with high impact in confidentiali...

CVE-2020-24160

The CVE-2020-24160 entry involves Shenzhen Tencent TIM Windows client 3.0.0.21315 and a DLL hijacking vulnerability that could allow a local attacker to execute arbitrary code. The available documents identify the vulnerability class (DLL hijack) and the affected product/version, but do not provi...