Orta CVSS 4.7
CVE-2025-41421: CVE-2025-41421: güvenlik açığı
Açıklama (NVD)
Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update file path. This may result in unauthorized access to sensitive information.
Özet bilgiler
- CVSS v3.1
- 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS
- %0,14 (yüzdelik 3)
- CWE
- CWE-59
- Yama
- Yok / bilinmiyor