{"affected":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"TeamViewer Remote - Patch Management","source":"CNA: TV","vendor":"TeamViewer","versions":[{"lessThan":"26.9.1","status":"affected","version":"0","versionType":"custom"},{"lessThan":"24.12.5 (Legacy version for v14.7 client)","status":"affected","version":"0 (Legacy version for v14.7 client)","versionType":"custom"}]}],"cveId":"CVE-2026-111584","cwes":["CWE-269"],"description":"A race condition in the installation\nprocess of TeamViewer Remote Management - Patch Management for Windows prior to\nversion 26.9.1 allows a local authenticated attacker with low privileges to\nexecute arbitrary code with elevated privileges by replacing the service\nexecutable in an insufficiently protected temporary directory during Patch\nManagement activation.","epss":{"date":"2026-11-04","percentile":0.01182,"score":0.00108},"exploits":[],"kev":null,"metrics":[{"score":7.3,"severity":"high","source":"CNA: TV","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793824060604,"publishedAt":1793114330953,"references":[{"source":"CNA: TV","tags":["vendor-advisory"],"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"}],"remediation":[{"kind":"fix","source":"CNA: TV","text":"Update to the latest available version."}],"revision":"2ee4215ebf2ba12a724299e6d7ff152d470f9992b1f39dd8af74b2cf78b55a3c","sources":[{"modifiedAt":1793824060604,"name":"CNA: TV","retrievedAt":1793826577706,"url":"https://www.cve.org/CVERecord?id=CVE-2026-111584"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793826587752,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-111584"}],"ssvc":{"assessedAt":1793817953098,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows","updatedAt":1793826587752}