Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update file path. This may result in unauthorized access to sensitive information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Teamviewer Host | — | Upgrade TeamViewer Host to the latest version | Oct 2, 2025 | Oct 1, 2025 |
| Teamviewer Remote | — | Upgrade TeamViewer Remote to the latest version | Oct 6, 2025 | Oct 1, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub