Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 64

Export CSV
CVE-2026-92377

Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92376

Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows

Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM privileges, resulting in local privilege escalation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Remote Management - Monitoring
CVE-2026-92375

Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host Remote Management - Monitoring
CVE-2026-92374

Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS

A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92372

Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client
CVE-2026-111585

Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Portable Remote
CVE-2026-111584

Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Teamviewer Remote - Patch Management
CVE-2026-111583

Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-111582

Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges. Exploitation requires user interaction.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Remote Management - Monitoring
CVE-2026-92371

Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording

TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged file operations in unintended locations on the affected system.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92370

Remote Session Access Control Bypass Leading to Remote Code Execution

An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92369

Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer, resulting in privilege escalation to NT AUHORITY/SYSTEM. Exploitation requires successful timing of the race condition and a rollback during installation or update.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-92368

Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-19743

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-16444

Improper Validation of File Paths in TeamViewer Desktop Clients

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can leverage this behavior to achieve arbitrary file write and potentially execute code with the privileges of the affected user.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Full Client, Host, Quicksupport & Portable Full Client, Host, Quicksupport & Portable (for Windows 7 & 8) and 7 more
CVE-2026-19042

Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user interaction by clicking the malicious link.

CVSS 3.1 · 8.8 High EPSS 1.8% KEV · Not listed
Vendors
Teamviewer
Products
Full Client Host
CVE-2026-12703

Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
One Remote Tensor
CVE-2026-8381

Broken Access Control in TeamViewer DEX Platform (On Premises)

A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for higher‑privileged roles. An attacker with low‑privileged credentials may exploit this to gain unauthorized access to administrative or sensitive functionality.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Dex
CVE-2026-2695

Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)

A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could lead to execution of elevated commands on devices connected to the platform.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Teamviewer
Products
Dex
CVE-2026-23565

Denial-of-Service in Content Distribution Service

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause the NomadBranch.exe process to terminate via crafted requests. This can result in a denial-of-service condition of the Content Distribution Service.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Teamviewer
Products
Windows Dex Digital Employee Experience