CVEvulnerability

CVE-2026-111584

7.3 HIGH Published 2026-10-27 Modified 2026-10-28 Official page ↗
Status
Awaiting Analysis
Published
2026-10-27
Last modified
2026-10-28
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-269

Description

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References