CVE-2026-111584 Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-111584?
CVE-2026-111584 is a high-severity vulnerability in TeamViewer Remote - Patch Management, published on 27 Oct 2026.
Official description
A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.
Weakness: CWE-269
Which versions are affected by CVE-2026-111584?
How do I fix CVE-2026-111584?
No fix has been published for CVE-2026-111584 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-111584 being exploited?
There is no known exploitation of CVE-2026-111584 in the wild and no public exploit code.
Sources
Also known as GHSA-h5jh-rr9v-jv3h.