CVE-2026-92377

Full vulnerability record from the local CVENow database.

Description

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.

Severity

HIGH

CVSS score

7.8 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

[email protected]

Published

2026-10-27 16:17:32.213000

Last modified

2026-10-28 14:45:23.073000

View original CVE JSON

{
  "id": "CVE-2026-92377",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-27T16:17:32.213",
  "lastModified": "2026-10-28T14:45:23.073",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper access control in the Patch\nManagement update mechanism of TeamViewer Full Client and Host for Windows\nprior to version 15.82 allows a local authenticated attacker with low\nprivileges to supply a signed executable through a forged IPC response and\ncause it to load a malicious DLL from a user-writable temporary directory.\nSuccessful exploitation results in arbitrary code execution with NT\nAUTHORITY\\SYSTEM privileges."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "TeamViewer",
          "product": "Full Client",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "15.82",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "15.64.0 (Legacy Windows 7 & 8)",
              "lessThan": "15.64.10 (Legacy Windows 7 & 8)",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "14.7.0",
              "lessThan": "14.7.48868",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "13.2.0",
              "lessThan": "13.2.36231",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "TeamViewer",
          "product": "Host",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "15.82",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "15.64.0 (Legacy Windows 7 & 8)",
              "lessThan": "15.64.10 (Legacy Windows 7 & 8)",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "14.7.0",
              "lessThan": "14.7.48868",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "13.2.0",
              "lessThan": "13.2.36231",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/",
      "source": "[email protected]"
    }
  ]
}