4.7Orta

CVE-2025-41421Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client

TeamViewer Full Client; TeamViewer Host Yayım: (1 yıl önce)

Açıklama

Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update file path. This may result in unauthorized access to sensitive information.

Zayıflık türü (CWE): CWE-59

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
TeamViewer Full Client 11.0.0 – < 15.70
TeamViewer Host 11.0.0 – < 15.70

Kaynaklar ve yamalar