Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-92377

Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TV

Description

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TeamViewer Full Client

Default version status: unaffected

  • 0 to < 15.82affected
  • 15.64.0 (Legacy Windows 7 & 8) to < 15.64.10 (Legacy Windows 7 & 8)affected
  • 14.7.0 to < 14.7.48868affected
  • 13.2.0 to < 13.2.36231affected

TeamViewer Host

Default version status: unaffected

  • 0 to < 15.82affected
  • 15.64.0 (Legacy Windows 7 & 8) to < 15.64.10 (Legacy Windows 7 & 8)affected
  • 14.7.0 to < 14.7.48868affected
  • 13.2.0 to < 13.2.36231affected

References