PT-2025-34754 · Teamviewer · Teamviewer

Published 2025-07-31 · Updated 2025-08-29 · CVE-2025-44002

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions: TeamViewer versions prior to 15.69

Description: A race condition exists in the directory validation logic within the TeamViewer Full Client and Host on Windows. This allows a local, non-administrator user to create arbitrary files with SYSTEM privileges. This can lead to a denial-of-service condition through the manipulation of a symbolic link during directory verification.

Recommendations: Update TeamViewer to version 15.69 or later.

Fix

DoS

RCE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2025-10872

CVE-2025-44002

ZDI-25-872

Affected Products

Teamviewer

References · 10

• https://zerodayinitiative.com/advisories/ZDI-25-872 · Security Note
• https://bdu.fstec.ru/vul/2025-10872 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-44002 · Security Note
• https://twitter.com/VulmonFeeds/status/1960312330580848812 · Twitter Post
• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1003/? · Note
• https://twitter.com/SystemTek_UK/status/1961314445721747734 · Twitter Post
• https://twitter.com/CVEnew/status/1960303726909907151 · Twitter Post
• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1003 · Note
• https://t.me/CVEtracker/30913 · Telegram Post
• https://t.me/cveNotify/133434 · Telegram Post