Security Advisory

CVE-2025-36537

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-06-24 14:24:08

Last updated 2025-06-24 15:31:17

Assigner TV

CVSS score 7.0

State PUBLISHED

Description

Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows allows a local unprivileged user to trigger arbitrary file deletion with SYSTEM privileges via leveraging the MSI rollback mechanism. The vulnerability only applies to the Remote Management features: Backup, Monitoring, and Patch Management.

← Browse all CVEs View on cve.org ↗