medium4.7
CVE-2025-41421
Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an…
Impact
Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update file path. This may result in unauthorized access to sensitive information.
Affected products
| Product | Affected versions |
|---|---|
| Versions | before 15.70 |
Versions were read from the advisory text. No structured product data has been published for this record yet.