Description
A race condition in the installation
process of TeamViewer Remote Management - Patch Management for Windows prior to
version 26.9.1 allows a local authenticated attacker with low privileges to
execute arbitrary code with elevated privileges by replacing the service
executable in an insufficiently protected temporary directory during Patch
Management activation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TeamViewer | TeamViewer Remote - Patch Management | < 26.9.1, 0 (Legacy version for v14.7 client) – < 24.12.5 (Legacy version for v14.7 client) | 26.9.1 |
Advisories 1
- WID-SEC-2026-4188 TeamViewer: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Oct 27, 2026