7.8
HighCVSS 3.1 · from TV
CVE-2026-92375
Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
Full Client · Improper access control · CWE-284AffectedFull Client, Host, Remote Management - Monitoring
FixUpdate to 15.83, 15.64.10 (Legacy Windows 7 & 8), 14.7.48868 (Windows), 14.7.48868 (Linux) or newer
PublishedOct 27, 15:10 · TV
ScoredOct 27 · 7.8 · TV
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:05 UTC
What we know
No known exploitation. CISA KEV, checked 22:05 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs local access to the machine. CVSS: local.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.
Description
An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.
From TV
Affected and fixed versions
ProductAffectedFixed inFull Clientbefore 15.8315.83Full Client15.64.0 (Legacy Windows 7 & 8) – before 15.64.10 (Legacy Windows 7 & 8)15.64.10 (Legacy Windows 7 & 8)Full Client14.7.0 (Windows) – before 14.7.48868 (Windows)14.7.48868 (Windows)Full Client14.7.0 (Linux) – before 14.7.48868 (Linux)14.7.48868 (Linux)Full Client14.7.0 (macOS) – before 14.7.48868 (macOS)14.7.48868 (macOS)Full Client13.2.0 (Windows) – before 13.2.36231 (Windows)13.2.36231 (Windows)Full Client13.2.0 (Linux) – before 13.2.154008 (Linux)13.2.154008 (Linux)Full Client13.2.0 (macOS) – before 13.2.154007 (macOS)13.2.154007 (macOS)Hostbefore 15.8315.83Host15.64.0 (Legacy Windows 7 & 8) – before 15.64.10 (Legacy Windows 7 & 8)15.64.10 (Legacy Windows 7 & 8)Host14.7.0 (Windows) – before 14.7.48868 (Windows)14.7.48868 (Windows)Host14.7.0 (Linux) – before 14.7.48868 (Linux)14.7.48868 (Linux)Host14.7.0 (macOS) – before 14.7.48868 (macOS)14.7.48868 (macOS)Host13.2.0 (Windows) – before 13.2.36231 (Windows)13.2.36231 (Windows)Host13.2.0 (Linux) – before 13.2.154008 (Linux)13.2.154008 (Linux)Host13.2.0 (macOS) – before 13.2.154007 (macOS)13.2.154007 (macOS)Remote Management - Monitoringbefore 26.10.126.10.1
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known