Vulnerability · Published Oct 27, 2026 · Assigned by TV
CVE-2026-92377Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows
High 7.8
In plain English
A high-severity incorrect permission assignment in Full Client from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Official description
Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TeamViewer | Full Client | 0 – before 15.8215.64.0 (Legacy Windows 7 & 8) – before 15.64.10 (Legacy Windows 7 & 8)14.7.0 – before 14.7.4886813.2.0 – before 13.2.36231 |
| TeamViewer | Host | 0 – before 15.8215.64.0 (Legacy Windows 7 & 8) – before 15.64.10 (Legacy Windows 7 & 8)14.7.0 – before 14.7.4886813.2.0 – before 13.2.36231 |
Weakness: CWE-732 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H