CVE-2026-111584

1th percentile - higher than 1% of all known CVEs

A race condition exists in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1. A local authenticated attacker with low privileges can execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.

An attacker with a low-privileged account could gain code execution as a privileged user, leading to privilege escalation on the workstation. However, local access to the system is required.

Update TeamViewer Remote Management - Patch Management for Windows to version 26.9.1 or later. Limit the number of local accounts allowed to log on and monitor for unusual changes in temporary directories.