Home
MEDIUM: 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:HDefault status
unaffected
11.0.0 (custom) before 15.69
affected
Default status
unaffected
11.0.0 (custom) before 15.69
affected
Description
Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during directory verification.
Problem types
CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
Product status
11.0.0 (custom) before 15.69
11.0.0 (custom) before 15.69
Credits
Trend Micro Zero Day Initiative
References
www.teamviewer.com/...enter/security-bulletins/tv-2025-1003/