CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.0. It affects Windows. It may be remotely exploitable.
CVE
CVE-2025-36537
Severity
HIGH
CVSS
7
EPSS
0.16%
Windows
Original NVD Description
Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows allows a local unprivileged user to trigger arbitrary file deletion with SYSTEM privileges via leveraging the MSI rollback mechanism. The vulnerability only applies to the Remote Management features: Backup, Monitoring, and Patch Management.