EIP-2026-117125

This writeup describes two privilege escalation vulnerabilities in the Electronic Arts Origin Client (versions 9.5.5.2850 and earlier). The first involves improper file permissions allowing binary replacement, while the second is an unquoted service path issue. Both can lead to arbitrary code execution with SYSTEM privileges.