CVE-2025-41421

Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update fi...

CVE-2025-41421 Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client

Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update fi...

CVE-2025-41421 Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client

Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update fi...

CVE-2025-41421

CVE-2025-41421 describes a privilege-escalation flaw in TeamViewer components due to improper handling of symbolic links. A local, unprivileged attacker on Windows can spoof the update file path in TeamViewer Full Client, TeamViewer Host, and, per related sources, TeamViewer Remote and Tensor, fo...

PT-2025-40242

Name of the Vulnerable Software and Affected Versions TeamViewer versions prior to 15.70 TeamViewer Remote versions prior to 15.70 Tensor versions prior to 15.70 Description A flaw exists in the handling of symbolic links within the TeamViewer Full Client and Host for Windows, as well as TeamView...

CVE-2025-41421: Improper Link Resolution Before File Access

Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update fi...

TeamViewer Full Client和TeamViewer Host 安全漏洞

TeamViewer Full Client and TeamViewer Host are both a remote control software from the German company TeamViewer. A security vulnerability exists in TeamViewer Full Client and TeamViewer Host versions prior to 15.70 that stems from improper handling of symbolic links, which could lead to elevated...

KLA88689 OSI vulnerability in TeamViewer

Improper handling of symbolic links vulnerability was found in TeamViewer. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories TV-2025-1004: Privilege Escalation via Symbolic Link Spoofing in TeamViewer Service Related...

The vulnerabilities of the Full Client and Host/Custom Host modules of the TeamViewer Remote software allow a hacker to load arbitrary files or cause service interruptions.

The vulnerability of the Full Client and Host/Custom Host modules of the TeamViewer Remote software for remote control of computers is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to load arbitrary files with SYSTEM privileges...

CVE-2025-44002

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during...

CVE-2025-44002

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during...

CVE-2025-44002

CVE-2025-44002 affects TeamViewer Full Client and TeamViewer Host before version 15.69 on Windows. The root cause is a race condition in the directory validation logic, allowing a local non-admin user to exploit symbolic-link manipulation to create arbitrary files with SYSTEM privileges, potentia...

CVE-2025-44002 Arbitrary File Creation via Symbolic Link leading to Denial-of-Service

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during...

CVE-2025-44002 Arbitrary File Creation via Symbolic Link leading to Denial-of-Service

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during...

PT-2025-34754 · Teamviewer · Teamviewer

Name of the Vulnerable Software and Affected Versions: TeamViewer versions prior to 15.69 Description: A race condition exists in the directory validation logic within the TeamViewer Full Client and Host on Windows. This allows a local, non-administrator user to create arbitrary files with SYSTEM...

CVE-2025-44002: Time-of-check Time-of-use (TOCTOU) Race Condition

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during...

TeamViewer Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

TeamViewer Full Client和TeamViewer Host 安全漏洞

TeamViewer Full Client and TeamViewer Host are both a remote control software from the German company TeamViewer. A security vulnerability exists in TeamViewer Full Client and TeamViewer Host versions prior to 15.69, which stems from a contention condition in the directory validation logic that...

TeamViewer Remote Full Client (Windows) < 11.0.259324 / 12.x < 12.0.259325 / 13.x < 13.2.36227 / 14.x < 14.7.48809 / 15.x < 15.64.5 / 15.65.x < 15.67 Privilege Escalation (TV-2025-1002)

The version of TeamViewer Remote Full Client installed on the remote Windows host is prior to 11.0.259324, 12.x prior to 12.0.259325, 13.x prior to 13.2.36227, 14.x prior to 14.7.48809, 15.x prior to 15.64.5, or 15.65.x prior to 15.67. It is, therefore, affected by a privilege escalation...

CVE-2025-36537

Incorrect Permission Assignment for Critical Resource in the TeamViewer Client Full and Host of TeamViewer Remote and Tensor prior Version 15.67 on Windows allows a local unprivileged user to trigger arbitrary file deletion with SYSTEM privileges via leveraging the MSI rollback mechanism. The...