CVE-2026-92377 PUBLISHED

Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows

Assigner: TV
Reserved: 16.09.2026 Published: 27.10.2026 Updated: 27.10.2026

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Product Status

Vendor TeamViewer
Product Full Client
Versions Default: unaffected
  • affected from 0 to 15.82 (excl.)
  • affected from 15.64.0 (Legacy Windows 7 & 8) to 15.64.10 (Legacy Windows 7 & 8) (excl.)
  • affected from 14.7.0 to 14.7.48868 (excl.)
  • affected from 13.2.0 to 13.2.36231 (excl.)
Vendor TeamViewer
Product Host
Versions Default: unaffected
  • affected from 0 to 15.82 (excl.)
  • affected from 15.64.0 (Legacy Windows 7 & 8) to 15.64.10 (Legacy Windows 7 & 8) (excl.)
  • affected from 14.7.0 to 14.7.48868 (excl.)
  • affected from 13.2.0 to 13.2.36231 (excl.)

Solutions

Update to the latest available version.

Credits

  • 0x_alibabas (Giuliano Sanfins) finder

References

Problem Types

  • CWE-732: Incorrect Permission Assignment for Critical Resource CWE