process of TeamViewer Remote Management - Patch Management for Windows prior to
version 26.9.1 allows a local authenticated attacker with low privileges to
execute arbitrary code with elevated privileges by replacing the service
executable in an insufficiently protected temporary directory during Patch
Management activation.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TeamViewer | TeamViewer Remote - Patch Management | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
Update to the latest available version.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 27 Oct 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation. | |
| Title | Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows | |
| Weaknesses | CWE-269 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: TV
Published:
Updated: 2026-10-27T15:18:50.953Z
Reserved: 2026-10-16T13:05:08.747Z
Link: CVE-2026-111584
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-27T16:17:29.757
Modified: 2026-10-27T16:17:29.757
Link: CVE-2026-111584
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-269
Improper Privilege Management