Search
Find a vulnerability
Search criteria
6 vulnerabilities found for Remote Management - Monitoring by TeamViewer
CVE-2026-92376 (GCVE-0-2026-92376)
Vulnerability from nvd – Published: 2026-10-27 15:11 – Updated: 2026-10-27 15:11
VLAI
EPSS
VEX
Title
Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows
Summary
Improper authentication in the
inter-process communication (IPC) mechanism of TeamViewer Remote Management
Monitoring for Windows prior to version 26.10.1 allows a local authenticated
attacker with low privileges to impersonate the IPC broker and cause the
Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM
privileges, resulting in local privilege escalation.
Severity
7.8 (High)
CWE
- CWE-287 - Improper Authentication
References
1 reference
| URL | Tags |
|---|---|
| https://www.teamviewer.com/en/resources/trust-cen… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| TeamViewer | Remote Management - Monitoring |
Affected:
0 , < 26.10.1
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"ITbrain_Monitoring_Service.exe"
],
"platforms": [
"Windows"
],
"product": "Remote Management - Monitoring",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "26.10.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "0x_alibabas (Giuliano Sanfins)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eImproper authentication in the\ninter-process communication (IPC) mechanism of TeamViewer Remote Management\nMonitoring for Windows prior to version 26.10.1 allows a local authenticated\nattacker with low privileges to impersonate the IPC broker and cause the\nMonitoring service to execute arbitrary code with NT AUTHORITY\\SYSTEM\nprivileges, resulting in local privilege escalation.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "Improper authentication in the\ninter-process communication (IPC) mechanism of TeamViewer Remote Management\nMonitoring for Windows prior to version 26.10.1 allows a local authenticated\nattacker with low privileges to impersonate the IPC broker and cause the\nMonitoring service to execute arbitrary code with NT AUTHORITY\\SYSTEM\nprivileges, resulting in local privilege escalation."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287: Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T15:11:08.772Z",
"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"shortName": "TV"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to the latest available version."
}
],
"value": "Update to the latest available version."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"assignerShortName": "TV",
"cveId": "CVE-2026-92376",
"datePublished": "2026-10-27T15:11:08.772Z",
"dateReserved": "2026-09-16T07:16:01.957Z",
"dateUpdated": "2026-10-27T15:11:08.772Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-92375 (GCVE-0-2026-92375)
Vulnerability from nvd – Published: 2026-10-27 15:10 – Updated: 2026-10-27 15:10
VLAI
EPSS
VEX
Title
Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
Summary
An improper access control vulnerability in
the IPC communication between TeamViewer Full Client or Host prior to version
15.83 and the Remote Management Monitoring component prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute scripts as
SYSTEM/root.
Severity
7.8 (High)
CWE
- CWE-284 - Improper Access Control
References
1 reference
| URL | Tags |
|---|---|
| https://www.teamviewer.com/en/resources/trust-cen… | vendor-advisory |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| TeamViewer | Full Client |
Affected:
0 , < 15.83
(custom)
Affected: 15.64.0 (Legacy Windows 7 & 8) , < 15.64.10 (Legacy Windows 7 & 8) (custom) Affected: 14.7.0 (Windows) , < 14.7.48868 (Windows) (custom) Affected: 14.7.0 (Linux) , < 14.7.48868 (Linux) (custom) Affected: 14.7.0 (macOS) , < 14.7.48868 (macOS) (custom) Affected: 13.2.0 (Windows) , < 13.2.36231 (Windows) (custom) Affected: 13.2.0 (Linux) , < 13.2.154008 (Linux) (custom) Affected: 13.2.0 (macOS) , < 13.2.154007 (macOS) (custom) |
|
| TeamViewer | Host |
Affected:
0 , < 15.83
(custom)
Affected: 15.64.0 (Legacy Windows 7 & 8) , < 15.64.10 (Legacy Windows 7 & 8) (custom) Affected: 14.7.0 (Windows) , < 14.7.48868 (Windows) (custom) Affected: 14.7.0 (Linux) , < 14.7.48868 (Linux) (custom) Affected: 14.7.0 (macOS) , < 14.7.48868 (macOS) (custom) Affected: 13.2.0 (Windows) , < 13.2.36231 (Windows) (custom) Affected: 13.2.0 (Linux) , < 13.2.154008 (Linux) (custom) Affected: 13.2.0 (macOS) , < 13.2.154007 (macOS) (custom) |
|
| TeamViewer | Remote Management - Monitoring |
Affected:
0 , < 26.10.1
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Full Client",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "15.83",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.64.10 (Legacy Windows 7 \u0026 8)",
"status": "affected",
"version": "15.64.0 (Legacy Windows 7 \u0026 8)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Windows)",
"status": "affected",
"version": "14.7.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Linux)",
"status": "affected",
"version": "14.7.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (macOS)",
"status": "affected",
"version": "14.7.0 (macOS)",
"versionType": "custom"
},
{
"lessThan": "13.2.36231 (Windows)",
"status": "affected",
"version": "13.2.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "13.2.154008 (Linux)",
"status": "affected",
"version": "13.2.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "13.2.154007 (macOS)",
"status": "affected",
"version": "13.2.0 (macOS)",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Host",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "15.83",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.64.10 (Legacy Windows 7 \u0026 8)",
"status": "affected",
"version": "15.64.0 (Legacy Windows 7 \u0026 8)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Windows)",
"status": "affected",
"version": "14.7.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Linux)",
"status": "affected",
"version": "14.7.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (macOS)",
"status": "affected",
"version": "14.7.0 (macOS)",
"versionType": "custom"
},
{
"lessThan": "13.2.36231 (Windows)",
"status": "affected",
"version": "13.2.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "13.2.154008 (Linux)",
"status": "affected",
"version": "13.2.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "13.2.154007 (macOS)",
"status": "affected",
"version": "13.2.0 (macOS)",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"modules": [
"ITbrain_Monitoring_Service.exe",
"MonitoringDaemon",
"teamviewer-monitoringd"
],
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Remote Management - Monitoring",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "26.10.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "0x_alibabas (Giuliano Sanfins)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn improper access control vulnerability in\nthe IPC communication between TeamViewer Full Client or Host prior to version\n15.83 and the Remote Management Monitoring component prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute scripts as\nSYSTEM/root.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "An improper access control vulnerability in\nthe IPC communication between TeamViewer Full Client or Host prior to version\n15.83 and the Remote Management Monitoring component prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute scripts as\nSYSTEM/root."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284: Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T15:10:09.611Z",
"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"shortName": "TV"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to the latest available version."
}
],
"value": "Update to the latest available version."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"assignerShortName": "TV",
"cveId": "CVE-2026-92375",
"datePublished": "2026-10-27T15:10:09.611Z",
"dateReserved": "2026-09-16T07:16:01.957Z",
"dateUpdated": "2026-10-27T15:10:09.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111582 (GCVE-0-2026-111582)
Vulnerability from nvd – Published: 2026-10-27 15:13 – Updated: 2026-10-27 15:13
VLAI
EPSS
VEX
Title
Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows
Summary
A DLL loading vulnerability in the
TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute arbitrary
code with elevated privileges. Exploitation requires user interaction.
Severity
7.3 (High)
CWE
- CWE-269 - Improper Privilege Management
References
1 reference
| URL | Tags |
|---|---|
| https://www.teamviewer.com/en/resources/trust-cen… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| TeamViewer | Remote Management - Monitoring |
Affected:
0 , < 26.10.1
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"MonitoringInstaller.exe"
],
"platforms": [
"Windows"
],
"product": "Remote Management - Monitoring",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "26.10.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "0x_alibabas (Giuliano Sanfins)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA DLL loading vulnerability in the\nTeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute arbitrary\ncode with elevated privileges. Exploitation requires user interaction.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "A DLL loading vulnerability in the\nTeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute arbitrary\ncode with elevated privileges. Exploitation requires user interaction."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269: Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T15:13:13.769Z",
"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"shortName": "TV"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to the latest available version."
}
],
"value": "Update to the latest available version."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"assignerShortName": "TV",
"cveId": "CVE-2026-111582",
"datePublished": "2026-10-27T15:13:13.769Z",
"dateReserved": "2026-10-16T13:05:08.747Z",
"dateUpdated": "2026-10-27T15:13:13.769Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111582 (GCVE-0-2026-111582)
Vulnerability from cvelistv5 – Published: 2026-10-27 15:13 – Updated: 2026-10-27 15:13
VLAI
EPSS
VEX
Title
Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows
Summary
A DLL loading vulnerability in the
TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute arbitrary
code with elevated privileges. Exploitation requires user interaction.
Severity
7.3 (High)
CWE
- CWE-269 - Improper Privilege Management
References
1 reference
| URL | Tags |
|---|---|
| https://www.teamviewer.com/en/resources/trust-cen… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| TeamViewer | Remote Management - Monitoring |
Affected:
0 , < 26.10.1
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"MonitoringInstaller.exe"
],
"platforms": [
"Windows"
],
"product": "Remote Management - Monitoring",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "26.10.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "0x_alibabas (Giuliano Sanfins)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA DLL loading vulnerability in the\nTeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute arbitrary\ncode with elevated privileges. Exploitation requires user interaction.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "A DLL loading vulnerability in the\nTeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute arbitrary\ncode with elevated privileges. Exploitation requires user interaction."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269: Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T15:13:13.769Z",
"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"shortName": "TV"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to the latest available version."
}
],
"value": "Update to the latest available version."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"assignerShortName": "TV",
"cveId": "CVE-2026-111582",
"datePublished": "2026-10-27T15:13:13.769Z",
"dateReserved": "2026-10-16T13:05:08.747Z",
"dateUpdated": "2026-10-27T15:13:13.769Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-92376 (GCVE-0-2026-92376)
Vulnerability from cvelistv5 – Published: 2026-10-27 15:11 – Updated: 2026-10-27 15:11
VLAI
EPSS
VEX
Title
Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows
Summary
Improper authentication in the
inter-process communication (IPC) mechanism of TeamViewer Remote Management
Monitoring for Windows prior to version 26.10.1 allows a local authenticated
attacker with low privileges to impersonate the IPC broker and cause the
Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM
privileges, resulting in local privilege escalation.
Severity
7.8 (High)
CWE
- CWE-287 - Improper Authentication
References
1 reference
| URL | Tags |
|---|---|
| https://www.teamviewer.com/en/resources/trust-cen… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| TeamViewer | Remote Management - Monitoring |
Affected:
0 , < 26.10.1
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"ITbrain_Monitoring_Service.exe"
],
"platforms": [
"Windows"
],
"product": "Remote Management - Monitoring",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "26.10.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "0x_alibabas (Giuliano Sanfins)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eImproper authentication in the\ninter-process communication (IPC) mechanism of TeamViewer Remote Management\nMonitoring for Windows prior to version 26.10.1 allows a local authenticated\nattacker with low privileges to impersonate the IPC broker and cause the\nMonitoring service to execute arbitrary code with NT AUTHORITY\\SYSTEM\nprivileges, resulting in local privilege escalation.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "Improper authentication in the\ninter-process communication (IPC) mechanism of TeamViewer Remote Management\nMonitoring for Windows prior to version 26.10.1 allows a local authenticated\nattacker with low privileges to impersonate the IPC broker and cause the\nMonitoring service to execute arbitrary code with NT AUTHORITY\\SYSTEM\nprivileges, resulting in local privilege escalation."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287: Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T15:11:08.772Z",
"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"shortName": "TV"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to the latest available version."
}
],
"value": "Update to the latest available version."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"assignerShortName": "TV",
"cveId": "CVE-2026-92376",
"datePublished": "2026-10-27T15:11:08.772Z",
"dateReserved": "2026-09-16T07:16:01.957Z",
"dateUpdated": "2026-10-27T15:11:08.772Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-92375 (GCVE-0-2026-92375)
Vulnerability from cvelistv5 – Published: 2026-10-27 15:10 – Updated: 2026-10-27 15:10
VLAI
EPSS
VEX
Title
Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
Summary
An improper access control vulnerability in
the IPC communication between TeamViewer Full Client or Host prior to version
15.83 and the Remote Management Monitoring component prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute scripts as
SYSTEM/root.
Severity
7.8 (High)
CWE
- CWE-284 - Improper Access Control
References
1 reference
| URL | Tags |
|---|---|
| https://www.teamviewer.com/en/resources/trust-cen… | vendor-advisory |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| TeamViewer | Full Client |
Affected:
0 , < 15.83
(custom)
Affected: 15.64.0 (Legacy Windows 7 & 8) , < 15.64.10 (Legacy Windows 7 & 8) (custom) Affected: 14.7.0 (Windows) , < 14.7.48868 (Windows) (custom) Affected: 14.7.0 (Linux) , < 14.7.48868 (Linux) (custom) Affected: 14.7.0 (macOS) , < 14.7.48868 (macOS) (custom) Affected: 13.2.0 (Windows) , < 13.2.36231 (Windows) (custom) Affected: 13.2.0 (Linux) , < 13.2.154008 (Linux) (custom) Affected: 13.2.0 (macOS) , < 13.2.154007 (macOS) (custom) |
|
| TeamViewer | Host |
Affected:
0 , < 15.83
(custom)
Affected: 15.64.0 (Legacy Windows 7 & 8) , < 15.64.10 (Legacy Windows 7 & 8) (custom) Affected: 14.7.0 (Windows) , < 14.7.48868 (Windows) (custom) Affected: 14.7.0 (Linux) , < 14.7.48868 (Linux) (custom) Affected: 14.7.0 (macOS) , < 14.7.48868 (macOS) (custom) Affected: 13.2.0 (Windows) , < 13.2.36231 (Windows) (custom) Affected: 13.2.0 (Linux) , < 13.2.154008 (Linux) (custom) Affected: 13.2.0 (macOS) , < 13.2.154007 (macOS) (custom) |
|
| TeamViewer | Remote Management - Monitoring |
Affected:
0 , < 26.10.1
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Full Client",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "15.83",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.64.10 (Legacy Windows 7 \u0026 8)",
"status": "affected",
"version": "15.64.0 (Legacy Windows 7 \u0026 8)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Windows)",
"status": "affected",
"version": "14.7.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Linux)",
"status": "affected",
"version": "14.7.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (macOS)",
"status": "affected",
"version": "14.7.0 (macOS)",
"versionType": "custom"
},
{
"lessThan": "13.2.36231 (Windows)",
"status": "affected",
"version": "13.2.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "13.2.154008 (Linux)",
"status": "affected",
"version": "13.2.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "13.2.154007 (macOS)",
"status": "affected",
"version": "13.2.0 (macOS)",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Host",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "15.83",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.64.10 (Legacy Windows 7 \u0026 8)",
"status": "affected",
"version": "15.64.0 (Legacy Windows 7 \u0026 8)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Windows)",
"status": "affected",
"version": "14.7.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Linux)",
"status": "affected",
"version": "14.7.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (macOS)",
"status": "affected",
"version": "14.7.0 (macOS)",
"versionType": "custom"
},
{
"lessThan": "13.2.36231 (Windows)",
"status": "affected",
"version": "13.2.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "13.2.154008 (Linux)",
"status": "affected",
"version": "13.2.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "13.2.154007 (macOS)",
"status": "affected",
"version": "13.2.0 (macOS)",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"modules": [
"ITbrain_Monitoring_Service.exe",
"MonitoringDaemon",
"teamviewer-monitoringd"
],
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Remote Management - Monitoring",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "26.10.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "0x_alibabas (Giuliano Sanfins)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn improper access control vulnerability in\nthe IPC communication between TeamViewer Full Client or Host prior to version\n15.83 and the Remote Management Monitoring component prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute scripts as\nSYSTEM/root.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "An improper access control vulnerability in\nthe IPC communication between TeamViewer Full Client or Host prior to version\n15.83 and the Remote Management Monitoring component prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute scripts as\nSYSTEM/root."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284: Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T15:10:09.611Z",
"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"shortName": "TV"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to the latest available version."
}
],
"value": "Update to the latest available version."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"assignerShortName": "TV",
"cveId": "CVE-2026-92375",
"datePublished": "2026-10-27T15:10:09.611Z",
"dateReserved": "2026-09-16T07:16:01.957Z",
"dateUpdated": "2026-10-27T15:10:09.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}