CVE-2026-111584: CVE-2026-111584: hatalı yetki yönetimi

Açıklama (NVD)

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.

Özet bilgiler

CVSS v3.1

7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

%0,11 (yüzdelik 1)

CWE

CWE-269

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.teamviewer.com
• CWE-269