Description
Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC response and
cause it to load a malicious DLL from a user-writable temporary directory.
Successful exploitation results in arbitrary code execution with NT
AUTHORITY\SYSTEM privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TeamViewer | Full Client | < 15.82, 15.64.0 (Legacy Windows 7 & 8) – < 15.64.10 (Legacy Windows 7 & 8), 14.7.0 – < 14.7.48868, 13.2.0 – < 13.2.36231 | 15.82 |
| TeamViewer | Host | < 15.82, 15.64.0 (Legacy Windows 7 & 8) – < 15.64.10 (Legacy Windows 7 & 8), 14.7.0 – < 14.7.48868, 13.2.0 – < 13.2.36231 | 15.82 |
Advisories 1
- WID-SEC-2026-4188 TeamViewer: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Oct 27, 2026