CVE-2025-44002— Arbitrary File Creation via Symbolic Link leading to Denial-of-Service
Quick assessment
Affected
TeamViewer Full Client
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
TeamViewer Full Client和TeamViewer Host都是德国TeamViewer公司的一个远程控制软件。 TeamViewer Full Client和TeamViewer Host 15.69之前版本存在安全漏洞，该漏洞源于目录验证逻辑存在竞争条件，可能导致拒绝服务。
Possible ATT&CK Techniques 1 AI
T1564.004 · NTFS File Attributes
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-44002
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Arbitrary File Creation via Symbolic Link leading to Denial-of-Service
Source: CVE Program / CVE List V5
Vulnerability Description
Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during directory verification.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Source: CVE Program / CVE List V5
Vulnerability Title
TeamViewer Full Client和TeamViewer Host 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TeamViewer Full Client和TeamViewer Host都是德国TeamViewer公司的一个远程控制软件。 TeamViewer Full Client和TeamViewer Host 15.69之前版本存在安全漏洞，该漏洞源于目录验证逻辑存在竞争条件，可能导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TeamViewer | Full Client | 11.0.0 ~ 15.69 | - |
|
| TeamViewer | Host | 11.0.0 ~ 15.69 | - |
|
II. Public POCs for CVE-2025-44002
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-44002
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Full Client
-
CVE-2026-92370
Remote Session Access Control Bypass Leading to Remote Code -
CVE-2026-92371
Local Privilege Escalation via Improper Link Resolution in C -
CVE-2026-92368
Heap-Based Buffer Overflow in TeamViewer Session Recording P -
CVE-2026-92369
Time-of-check Time-of-use (TOCTOU) Race Condition in TeamVie -
CVE-2026-19743
Improper Limitation of a Pathname to a Restricted Directory
Same vendor: TeamViewer
-
CVE-2026-92370
Remote Session Access Control Bypass Leading to Remote Code -
CVE-2026-92371
Local Privilege Escalation via Improper Link Resolution in C -
CVE-2026-92368
Heap-Based Buffer Overflow in TeamViewer Session Recording P -
CVE-2026-92369
Time-of-check Time-of-use (TOCTOU) Race Condition in TeamVie -
CVE-2026-19743
Improper Limitation of a Pathname to a Restricted Directory
Same weakness: CWE-367
-
CVE-2026-105163
crossplane crossplane-runtime ImageConfig client.go Get toct -
CVE-2026-105130
LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per -
CVE-2026-104474
OpenLiteSpeed before 1.9.3 Local Privilege Escalation via ls -
CVE-2026-47497
NVIDIA vGPU GSP追踪组件越界访问漏洞 -
CVE-2026-95344
Chrome 154 DevTools 竞态致站点隔离绕过
V. Comments for CVE-2025-44002
No comments yet