CVE-2026-111584

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.

CVSS 3.1

7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-269

Published

2026-10-27

Modified

2026-10-27

Record from

the CVE List, synced 2026-10-27

Affected

• teamviewer:teamviewer remote - patch management

References

• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/

Check your stackJSON