TeamViewer Remote Management: Local privilege escalation via race condition (CVE-2026-111584)
A race condition in TeamViewer Remote Management - Patch Management for Windows allows low-privileged local authenticated attackers to execute arbitrary code with elevated privileges.
CVE search metadata
CVE search record: CVE-2026-111584. Severity: high. CVSS: 7.3. KEV: no. Product: TeamViewer Remote Management - Patch Management (< 26.9.1). Brief: TeamViewer Remote Management: Local privilege escalation via race condition (CVE-2026-111584). Brief link: https://feed.craftedsignal.io/briefs/2026-10-teamviewer-patch-management-race-condition/
Triage facts
Revision 1- Applicability
- TeamViewer Remote Management - Patch Management (< 26.9.1)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 27, 20:01 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-111584 describes a race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1. An authenticated local attacker with low privileges can exploit this by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation, resulting in arbitrary code execution with elevated privileges.