CVE-2026-111583 PUBLISHED

Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

Assigner: TV
Reserved: 16.10.2026 Published: 27.10.2026 Updated: 27.10.2026

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS Score: 7.3

Product Status

Vendor TeamViewer
Product Full Client
Versions Default: unaffected
  • affected from 0 to 15.82 (excl.)
  • affected from 15.64.0 (Legacy windows 7 & 8) to 15.64.10 (Legacy windows 7 & 8) (excl.)
Vendor TeamViewer
Product Host
Versions Default: unaffected
  • affected from 0 to 15.82 (excl.)
  • affected from 15.64.0 (Legacy Windows 7 & 8) to 15.64.10 (Legacy Windows 7 & 8) (excl.)

Solutions

Update to the latest available version.

Credits

  • 0x_alibabas (Giuliano Sanfins) finder

References

Problem Types

  • CWE-269: Improper Privilege Management CWE