Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC response and
cause it to load a malicious DLL from a user-writable temporary directory.
Successful exploitation results in arbitrary code execution with NT
AUTHORITY\SYSTEM privileges.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TeamViewer | Full Client | unaffected |
|
|||||||||||||||
| TeamViewer | Host | unaffected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Teamviewer | Full Client | 100% |
|
||||||||||||||||||||
| Teamviewer | Host | 100% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
Vendor Solution
Update to the latest available version.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 27 Oct 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Teamviewer
Teamviewer full Client Teamviewer host |
|
| Vendors & Products |
Teamviewer
Teamviewer full Client Teamviewer host |
Tue, 27 Oct 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges. | |
| Title | Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows | |
| Weaknesses | CWE-732 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: TV
Published:
Updated: 2026-10-27T15:11:55.955Z
Reserved: 2026-09-16T07:16:01.957Z
Link: CVE-2026-92377
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-27T16:17:32.213
Modified: 2026-10-27T16:17:32.213
Link: CVE-2026-92377
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-27T20:45:08Z
-
CWE-732
Incorrect Permission Assignment for Critical Resource