Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-111583

Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TV

Description

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TeamViewer Full Client

Default version status: unaffected

  • 0 to < 15.82affected
  • 15.64.0 (Legacy windows 7 & 8) to < 15.64.10 (Legacy windows 7 & 8)affected

TeamViewer Host

Default version status: unaffected

  • 0 to < 15.82affected
  • 15.64.0 (Legacy Windows 7 & 8) to < 15.64.10 (Legacy Windows 7 & 8)affected

References