Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for TeamViewer Remote - Patch Management by TeamViewer

    CVE-2026-111584 (GCVE-0-2026-111584)

    Vulnerability from nvd – Published: 2026-10-27 15:18 – Updated: 2026-10-27 15:18
    VLAI
    Title
    Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows
    Summary
    A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.
    Severity
    7.3 (High)
    CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    TV CNA
    CNA scorecard B 80/100 over 19 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    TeamViewer TeamViewer Remote - Patch Management Affected: 0 , < 26.9.1 (custom)
    Affected: 0 (Legacy version for v14.7 client) , < 24.12.5 (Legacy version for v14.7 client) (custom)
    		Create a notification for this product.
    Credits
    0x_alibabas (Giuliano Sanfins)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "RM_PatchManagement_Service.exe"
          ],
          "platforms": [
            "Windows"
          ],
          "product": "TeamViewer Remote - Patch Management",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "26.9.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "24.12.5 (Legacy version for v14.7 client)",
              "status": "affected",
              "version": "0 (Legacy version for v14.7 client)",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "0x_alibabas (Giuliano Sanfins)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA race condition in the installation\nprocess of TeamViewer Remote Management - Patch Management for Windows prior to\nversion 26.9.1 allows a local authenticated attacker with low privileges to\nexecute arbitrary code with elevated privileges by replacing the service\nexecutable in an insufficiently protected temporary directory during Patch\nManagement activation.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "A race condition in the installation\nprocess of TeamViewer Remote Management - Patch Management for Windows prior to\nversion 26.9.1 allows a local authenticated attacker with low privileges to\nexecute arbitrary code with elevated privileges by replacing the service\nexecutable in an insufficiently protected temporary directory during Patch\nManagement activation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269: Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T15:18:50.953Z",
        "orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
        "shortName": "TV"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to the latest available version."
            }
          ],
          "value": "Update to the latest available version."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
    "assignerShortName": "TV",
    "cveId": "CVE-2026-111584",
    "datePublished": "2026-10-27T15:18:50.953Z",
    "dateReserved": "2026-10-16T13:05:08.747Z",
    "dateUpdated": "2026-10-27T15:18:50.953Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-111584 (GCVE-0-2026-111584)

    Vulnerability from cvelistv5 – Published: 2026-10-27 15:18 – Updated: 2026-10-27 15:18
    VLAI
    Title
    Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows
    Summary
    A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.
    Severity
    7.3 (High)
    CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    TV CNA
    CNA scorecard B 80/100 over 19 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    TeamViewer TeamViewer Remote - Patch Management Affected: 0 , < 26.9.1 (custom)
    Affected: 0 (Legacy version for v14.7 client) , < 24.12.5 (Legacy version for v14.7 client) (custom)
    		Create a notification for this product.
    Credits
    0x_alibabas (Giuliano Sanfins)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "RM_PatchManagement_Service.exe"
          ],
          "platforms": [
            "Windows"
          ],
          "product": "TeamViewer Remote - Patch Management",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "26.9.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "24.12.5 (Legacy version for v14.7 client)",
              "status": "affected",
              "version": "0 (Legacy version for v14.7 client)",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "0x_alibabas (Giuliano Sanfins)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA race condition in the installation\nprocess of TeamViewer Remote Management - Patch Management for Windows prior to\nversion 26.9.1 allows a local authenticated attacker with low privileges to\nexecute arbitrary code with elevated privileges by replacing the service\nexecutable in an insufficiently protected temporary directory during Patch\nManagement activation.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "A race condition in the installation\nprocess of TeamViewer Remote Management - Patch Management for Windows prior to\nversion 26.9.1 allows a local authenticated attacker with low privileges to\nexecute arbitrary code with elevated privileges by replacing the service\nexecutable in an insufficiently protected temporary directory during Patch\nManagement activation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269: Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T15:18:50.953Z",
        "orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
        "shortName": "TV"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to the latest available version."
            }
          ],
          "value": "Update to the latest available version."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
    "assignerShortName": "TV",
    "cveId": "CVE-2026-111584",
    "datePublished": "2026-10-27T15:18:50.953Z",
    "dateReserved": "2026-10-16T13:05:08.747Z",
    "dateUpdated": "2026-10-27T15:18:50.953Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}