CVE-2025-41421
Medium
Description
Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update file path. This may result in unauthorized access to sensitive information.
SeverityMedium
CVSS4.7
Exploit probability—
Product
Full Client
PublishedOct 1, 2025
First seenOct 1, 2025
Weakness typeCWE-59Improper link resolution
How to fix
Update
- TeamViewer Full Client15.70 or later
- TeamViewer Host15.70 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TeamViewer Full Client | 11.0.0 ≤ v < 15.70 | 15.70 |
| TeamViewer Host | 11.0.0 ≤ v < 15.70 | 15.70 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.