Description
Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during directory verification.
Problem types
CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
Product status
11.0.0 before 15.69
11.0.0 before 15.69
Credits
Trend Micro Zero Day Initiative
References
www.teamviewer.com/...enter/security-bulletins/tv-2025-1003/
