<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:webfeeds="http://webfeeds.org/rss/1.0"><channel><title>Cpe:2.3:a:teamviewer:remote_management_patch_management:*:*:*:*:*:*:*:* - CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/cpes/cpe2.3ateamviewerremote_management_patch_management/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata. Fed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Tue, 27 Oct 2026 20:01:11 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/cpes/cpe2.3ateamviewerremote_management_patch_management/feed.xml" rel="self" type="application/rss+xml"/><image><url>https://feed.craftedsignal.io/favicon-32x32.png</url><title>CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/</link><width>32</width><height>32</height></image><webfeeds:icon>https://feed.craftedsignal.io/favicon.svg</webfeeds:icon><item><title>TeamViewer Remote Management: Local privilege escalation via race condition (CVE-2026-111584)</title><link>https://feed.craftedsignal.io/briefs/2026-10-teamviewer-patch-management-race-condition/</link><pubDate>Tue, 27 Oct 2026 20:01:11 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-10-teamviewer-patch-management-race-condition/</guid><description>A race condition in TeamViewer Remote Management - Patch Management for Windows allows low-privileged local authenticated attackers to execute arbitrary code with elevated privileges.</description><content:encoded>&lt;p>CVE-2026-111584 describes a race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1. An authenticated local attacker with low privileges can exploit this by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation, resulting in arbitrary code execution with elevated privileges.&lt;/p>
</content:encoded><category domain="severity">high</category><category domain="type">advisory</category></item></channel></rss>