TeamViewer Remote and Tensor Privilege Escalation Vulnerability via Symbolic Link Spoofing

A privilege escalation vulnerability has been identified in the TeamViewer Full Client and Host for Windows, specifically in versions prior to 15.70 of TeamViewer Remote and Tensor. This vulnerability arises from improper handling of symbolic links, which allows an attacker with local, unprivileged access to a device without adequate malware protection to spoof the update file path. Exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information by escalating privileges on the affected device.

Remediation

Users are advised to update to TeamViewer version 15.70 or the latest available version. The vulnerability has been fixed in version 15.70.