Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Remote Host for Windows and TeamViewer Remote Full Client for Windows - CVE-2025-44002
Published: August 27, 2025 / Updated: August 30, 2025
Vulnerability identifier: #VU114446
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-44002
CWE-ID: CWE-367
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a time-of-check, time-of-use (TOCTOU) race condition in the Directory Validation Logic. A local user can create arbitrary files with SYSTEM privileges and cause a denial of service condition on the target system.
Affected software
TeamViewer Remote Host for Windows
TeamViewer Remote Full Client for Windows
TeamViewer Remote Full Client for Windows
How to mitigate CVE-2025-44002
Install updates from vendor's website.
TeamViewer Remote Host for Windows - update to 15.69
TeamViewer Remote Full Client for Windows - update to 15.69
TeamViewer Remote Full Client for Windows - update to 15.69