一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月30日

CVE-2026-19743 [HIGH] – Improper path validation in the local IPC service of TeamViewer Full Client and Host on Wi

未分类
📑 文章目录

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.