Description
Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows allows a local unprivileged user to trigger arbitrary file deletion with SYSTEM privileges via leveraging the MSI rollback mechanism. The vulnerability only applies to the Remote Management features: Backup, Monitoring, and Patch Management.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TeamViewer | Full Client | 15.0.0 – < 15.67, 14.0.0 – < 14.7.48809, 13.0.0 – < 13.2.36227, 12.0.0 – < 12.0.259325, 11.0.0 – < 11.0.259324 | 15.67 |
| TeamViewer | Host | 15.0.0 – < 15.67, 14.0.0 – < 14.7.48809, 13.0.0 – < 13.2.36227, 12.0.0 – < 12.0.259325, 11.0.0 – < 11.0.259324 | 15.67 |
| TeamViewer | Full Client (Win7/8) | 15.0.0 – < 15.64.5 | 15.64.5 |
| TeamViewer | Host (Win7/8) | 15.0.0 – < 15.64.5 | 15.64.5 |
Advisories 1
- WID-SEC-2025-1390 TeamViewer: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jun 24, 2025