Race condition in TeamViewer products - CVE-2026-111584

Vulnerability identifier: #VU158334

CSH Severity: Medium

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-111584

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code with elevated privileges.

The vulnerability exists due to a race condition in the installation process of TeamViewer Remote Management Patch Management for Windows when activating the service using an insufficiently protected temporary directory. A local user can replace the service executable during activation, with user interaction required, to execute arbitrary code with elevated privileges.

TeamViewer Remote Full Client for Windows
TeamViewer Host for macOS
TeamViewer Full Client for macOS
TeamViewer Host for Linux
TeamViewer Full Client for Linux
TeamViewer Remote Host for Windows

Install security update from vendor's website.

TeamViewer Remote Full Client for Windows - addressed in versions 13.2.36231, 14.7.48868, 15.64.10, 15.83
TeamViewer Remote Host for Windows - addressed in versions 13.2.36231, 14.7.48868, 15.64.10, 15.83
TeamViewer Host for macOS - addressed in versions 13.2.154007, 14.7.259386, 15.83
TeamViewer Full Client for macOS - addressed in versions 13.2.154007, 14.7.259386, 15.83
TeamViewer Host for Linux - addressed in versions 13.2.154008, 14.7.48868, 15.83
TeamViewer Full Client for Linux - addressed in versions 13.2.154008, 14.7.48868, 15.83

• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/

• Multiple vulnerabilities in TeamViewer Client and Host