Race Condition Vulnerability in TeamViewer Remote Management for Windows
CVE-2026-111584

7.3HIGH

Key Information:

Vendor

Teamviewer

Status
Teamviewer Remote - Patch Management
Vendor
CVE Published:
27 October 2026

What is CVE-2026-111584?

A race condition vulnerability has been identified in the installation process of TeamViewer Remote Management - Patch Management for Windows. This issue permits a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges. The attacker can exploit this vulnerability by replacing the service executable within an inadequately secured temporary directory during the activation process of Patch Management.

Affected Version(s)

TeamViewer Remote - Patch Management Windows 0 < 26.9.1

TeamViewer Remote - Patch Management Windows 0 (Legacy version for v14.7 client) < 24.12.5 (Legacy version for v14.7 client)

References

https://www.teamviewer.com/en/resources/trust-center/secu...
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0x_alibabas (Giuliano Sanfins)
.