Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC response and
cause it to load a malicious DLL from a user-writable temporary directory.
Successful exploitation results in arbitrary code execution with NT
AUTHORITY\SYSTEM privileges.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TeamViewer | Full Client | unaffected |
|
|||||||||||||||
| TeamViewer | Host | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
Update to the latest available version.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 27 Oct 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges. | |
| Title | Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows | |
| Weaknesses | CWE-732 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: TV
Published:
Updated: 2026-10-27T15:11:55.955Z
Reserved: 2026-09-16T07:16:01.957Z
Link: CVE-2026-92377
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-27T16:17:32.213
Modified: 2026-10-27T16:17:32.213
Link: CVE-2026-92377
Redhat
No data.
OpenCVE Enrichment
No data.