{"id":"CVE-2026-111584","aliases":[],"title":"Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows","description":"A race condition in the installation\nprocess of TeamViewer Remote Management - Patch Management for Windows prior to\nversion 26.9.1 allows a local authenticated attacker with low privileges to\nexecute arbitrary code with elevated privileges by replacing the service\nexecutable in an insufficiently protected temporary directory during Patch\nManagement activation.","severity":"high","score":7.3,"published":"2026-10-27T15:18:50.953Z","modified":"2026-10-27T15:18:50.953Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"],"sources":[{"name":"CVE","id":"CVE-2026-111584","modified":"2026-10-27T15:18:50.953Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-111584"}],"assessments":[{"source":"CNA","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","score":7.3}]}