Search: CVE-2026-92369

CVE-2026-92369 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the TeamViewer Full Client and Host installer rollback mechanism on Windows. It affects versions prior to 15.82. A local low-privileged attacker can exploit this race condition by replacing rollback backup files in a user-writable temporary directory before they are restored by an elevated installer, potentially escalating privileges to NT AUTHORITY/SYSTEM. Exploitation requires precise timing during installation or update rollback.