CVE-2025-44002 — Arbitrary File Creation via Symbolic Link leading to Denial-of-Service

CVE-2025-44002

Arbitrary File Creation via Symbolic Link leading to Denial-of-Service PUBLISHED

Description (CNA)

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during directory verification.

Affected (CNA)

Vendor / product	Versions
TeamViewer / Full Client	affected 11.0.0 before 15.69
TeamViewer / Host	affected 11.0.0 before 15.69

CWE

CWE-367

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1003/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.