7.8
HighCVSS 3.1 · from TV
CVE-2026-92377
Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows
Full Client · Incorrect permissions · CWE-732AffectedFull Client, Host
FixUpdate to 15.82, 15.64.10 (Legacy Windows 7 & 8), 14.7.48868, 13.2.36231 or newer
PublishedOct 27, 15:11 · TV
ScoredOct 27 · 7.8 · TV
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:05 UTC
What we know
No known exploitation. CISA KEV, checked 22:05 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs local access to the machine. CVSS: local.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.
Description
Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.
From TV
Affected and fixed versions
ProductAffectedFixed inFull Clientbefore 15.8215.82Full Client15.64.0 (Legacy Windows 7 & 8) – before 15.64.10 (Legacy Windows 7 & 8)15.64.10 (Legacy Windows 7 & 8)Full Client14.7.0 – before 14.7.4886814.7.48868Full Client13.2.0 – before 13.2.3623113.2.36231Hostbefore 15.8215.82Host15.64.0 (Legacy Windows 7 & 8) – before 15.64.10 (Legacy Windows 7 & 8)15.64.10 (Legacy Windows 7 & 8)Host14.7.0 – before 14.7.4886814.7.48868Host13.2.0 – before 13.2.3623113.2.36231
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known