6.1Orta
CVE-2025-44002Arbitrary File Creation via Symbolic Link leading to Denial-of-Service
Açıklama
Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during directory verification.
Zayıflık türü (CWE):
CWE-367
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| TeamViewer | Full Client | 11.0.0 – < 15.69 | |
| TeamViewer | Host | 11.0.0 – < 15.69 |