CVE-2026-111584
CVE-2026-111584 · Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.
CVSS 7.3 · High · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
teamviewer remote - patch management
- Versions
- ≥ 0, < 26.9.1: Affected (custom)
- ≥ 0 (Legacy version for v14.7 client), < 24.12.5 (Legacy version for v14.7 client): Affected (custom)
Update to 26.9.1