Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-111584

Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TV

Description

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TeamViewer TeamViewer Remote - Patch Management

Default version status: unaffected

  • 0 to < 26.9.1affected
  • 0 (Legacy version for v14.7 client) to < 24.12.5 (Legacy version for v14.7 client)affected

References