Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 19

Export CSV
CVE-2026-92377

Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92375

Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host Remote Management - Monitoring
CVE-2026-92374

Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS

A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92372

Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client
CVE-2026-111585

Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Portable Remote
CVE-2026-111583

Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92371

Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording

TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged file operations in unintended locations on the affected system.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92370

Remote Session Access Control Bypass Leading to Remote Code Execution

An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92369

Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer, resulting in privilege escalation to NT AUHORITY/SYSTEM. Exploitation requires successful timing of the race condition and a rollback during installation or update.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92368

Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-19743

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-16444

Improper Validation of File Paths in TeamViewer Desktop Clients

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can leverage this behavior to achieve arbitrary file write and potentially execute code with the privileges of the affected user.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Full Client, Host, Quicksupport & Portable Full Client, Host, Quicksupport & Portable (for Windows 7 & 8) and 7 more
CVE-2026-19042

Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user interaction by clicking the malicious link.

CVSS 3.1 · 8.8 High EPSS 1.8% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-23572

Improper Access Control in TeamViewer clients

Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to local confirmation. The user needs to be authenticated for the remote session via ID/password, Session Link, or Easy Access as a prerequisite to exploit this vulnerability.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host Teamviewer
CVE-2025-41421

Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client

Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update file path. This may result in unauthorized access to sensitive information.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Teamviewer
Products
Windows Full Client Host and 3 more
CVE-2025-36537

Incorrect Permission Assignment for Critical Resource in TeamViewer Remote Management

Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows allows a local unprivileged user to trigger arbitrary file deletion with SYSTEM privileges via leveraging the MSI rollback mechanism. The vulnerability only applies to the Remote Management features: Backup, Monitoring, and Patch Management.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2024-7481

Improper signature verification of Printer driver installation in TeamViewer Remote Clients

Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2024-7479

Improper signature verification of VPN driver installation in TeamViewer Remote Clients

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2025-44002

Arbitrary File Creation via Symbolic Link leading to Denial-of-Service

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during directory verification.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Teamviewer
Products
Windows Full Client Host