Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-92369

Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TV

Description

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer, resulting in privilege escalation to NT AUHORITY/SYSTEM. Exploitation requires successful timing of the race condition and a rollback during installation or update.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TeamViewer Full Client

Default version status: unaffected

  • 15.0 to < 15.82affected
  • 15.64.0 (Legacy Windows 7 & 8) to < 15.64.8 (Legacy Windows 7 & 8)affected
  • 14.7.0 to < 14.7.48855affected
  • 13.2.0 to < 13.2.36230affected

TeamViewer Host

Default version status: unaffected

  • 15.0 to < 15.82affected
  • 15.64.0 (Legacy Windows 7 & 8) to < 15.64.8 (Legacy Windows 7 & 8)affected
  • 14.7.0 to < 14.7.48855affected
  • 13.2.0 to < 13.2.36230affected

References