Description
Improper access control in the installer
staging directory used by TeamViewer Full Client and Host prior to version
15.82 for Windows during installation of Advanced Asset Management allows a
local authenticated user with low privileges to execute arbitrary commands as
SYSTEM. An attacker can place a crafted installer options file that is
processed by the Advanced Asset Management installer during service activation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TeamViewer | Full Client | < 15.82, 15.64.0 (Legacy windows 7 & 8) – < 15.64.10 (Legacy windows 7 & 8) | 15.82 |
| TeamViewer | Host | < 15.82, 15.64.0 (Legacy Windows 7 & 8) – < 15.64.10 (Legacy Windows 7 & 8) | 15.82 |
Advisories 1
- WID-SEC-2026-4188 TeamViewer: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Oct 27, 2026