7.3
HighCVSS 3.1 · from TV
CVE-2026-111583
Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows
Full Client · Improper privilege management · CWE-269AffectedFull Client, Host
FixUpdate to 15.82, 15.64.10 (Legacy windows 7 & 8), 15.64.10 (Legacy Windows 7 & 8) or newer
PublishedOct 27, 15:15 · TV
ScoredOct 27 · 7.3 · TV
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:05 UTC
What we know
No known exploitation. CISA KEV, checked 22:05 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs local access to the machine. CVSS: local.
Someone has to open, click or run something first. CVSS: user interaction required.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.
Description
Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.
From TV
Affected and fixed versions
ProductAffectedFixed inFull Clientbefore 15.8215.82Full Client15.64.0 (Legacy windows 7 & 8) – before 15.64.10 (Legacy windows 7 & 8)15.64.10 (Legacy windows 7 & 8)Hostbefore 15.8215.82Host15.64.0 (Legacy Windows 7 & 8) – before 15.64.10 (Legacy Windows 7 & 8)15.64.10 (Legacy Windows 7 & 8)
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known