CVE-2026-111583

Full vulnerability record from the local CVENow database.

Description

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.

Severity

HIGH

CVSS score

7.3 (v3.1)

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-10-27 16:17:29.643000

Last modified

2026-10-27 16:17:29.643000

View original CVE JSON

{
  "id": "CVE-2026-111583",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-27T16:17:29.643",
  "lastModified": "2026-10-27T16:17:29.643",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper access control in the installer\nstaging directory used by TeamViewer Full Client and Host prior to version\n15.82 for Windows during installation of Advanced Asset Management allows a\nlocal authenticated user with low privileges to execute arbitrary commands as\nSYSTEM. An attacker can place a crafted installer options file that is\nprocessed by the Advanced Asset Management installer during service activation."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "TeamViewer",
          "product": "Full Client",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "15.82",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "15.64.0 (Legacy windows 7 & 8)",
              "lessThan": "15.64.10 (Legacy windows 7 & 8)",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "TeamViewer",
          "product": "Host",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "15.82",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "15.64.0 (Legacy Windows 7 & 8)",
              "lessThan": "15.64.10 (Legacy Windows 7 & 8)",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "baseScore": 7.3,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.3,
        "impactScore": 5.9
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/",
      "source": "[email protected]"
    }
  ]
}