CVE-2026-111584: TeamViewer Remote - Patch Management, заобикаляне на

Описание

Оригинално описание

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.

Засегнати продукти

• TeamViewer TeamViewer Remote - Patch Management: преди 26.9.1; 0 (Legacy version for v14.7 client) преди 24.12.5 (Legacy version for v14.7 client)

Вид слабост

• CWE-269 Неправилно управление на привилегии

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-111584
• https://nvd.nist.gov/vuln/detail/CVE-2026-111584
• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/