A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local…
A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- TeamViewer
- Product
- TeamViewer Remote - Patch Management
- CVSS v3.1
- 7.3 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 0.001 (p1)
- Weakness
- CWE-269
- Exposure class
- Remote access
- NVD status
- Received
Why it ranks 24 (Routine)
- CVSS v3.1 7.3 high
- Exposed product class: remote access
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.