TV-2024-1002

A symlink vulnerability has been found in TeamViewer client for macOS prior version 15.52. The vulnerability has been fixed with version 15.52.

CVE-ID	CVE-2024-1933
Description	It was discovered that the Teamviewer client prior Version 15.52 for macOS is vulnerable to a symlink attack. An attacker with unprivileged access to the system could potentially elevate privileges or conduct a denial-service-attack. The vulnerability has been fixed with version 15.52. We strongly recommend users to update their TeamViewer macOS clients immediately.
CVSS3.0 Score	Base Score 7.1 (High)
CVSS3.1 Vector String	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Problem type	CWE-61: UNIX Symbolic Link (Symlink) Following

Product	Versions	Info
Teamviewer Remote client	< 15.52	Update available

Update to the latest version of TeamViewer client for macOS (15.52 or higher).

TeamViewer’s security team will investigate every submission in our Vulnerability Disclosure Program.

Improper symlink resolution in TeamViewer Remote client for macOS