Vulnerability-Lookup

CVE-2026-16444 (GCVE-0-2026-16444)

Vulnerability from cvelistv5 – Published: 2026-08-26 09:10 – Updated: 2026-08-27 03:58

Title

Improper Validation of File Paths in TeamViewer Desktop Clients

Summary

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can leverage this behavior to achieve arbitrary file write and potentially execute code with the privileges of the affected user.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-26 00:00 UTC

CWE

CWE-73 - External control of file name or path

Assigner

References

1 reference

URL	Tags
https://www.teamviewer.com/de/resources/trust-cen…

Impacted products

8 products

Vendor	Product	Version	CPE status
TeamViewer	Full Client, Host, QuickSupport & Portable	Affected: 15.0 , < 15.81.5 (custom)	guessed
TeamViewer	Full Client, Host, QuickSupport & Portable (for Windows 7 & 8)	Affected: 15.64.0 , < 15.64.7 (custom)	guessed
TeamViewer	Full Client, Host, QuickSupport (v14 for Windows)	Affected: 14.0 , < 14.7.48833 (custom)	guessed
TeamViewer	Full Client, Host, QuickSupport (v14 for Linux)	Affected: 14.0 , < 14.7.48838 (custom)	guessed
TeamViewer	Full Client, Host, QuickSupport (v14 for macOS)	Affected: 14.0 , < 14.7.48838 (custom)	guessed
TeamViewer	Full Client, Host, QuickSupport & Portable (v13 for Windows)	Affected: 13.0 , < 13.2.36229 (custom)	guessed
TeamViewer	Full Client, Host, QuickSupport (v13 for Linux)	Affected: 13.0 , < 13.2.153978 (custom)	guessed
TeamViewer	Full Client, Host, QuickSupport (v13 for macOS)	Affected: 13.0 , < 13.2.153981 (custom)	guessed

Credits

Jamir0quai & sam91281

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-16444",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-26T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-27T03:58:23.229Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS",
            "Linux"
          ],
          "product": "Full Client, Host, QuickSupport \u0026 Portable",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "15.81.5",
              "status": "affected",
              "version": "15.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Full Client, Host, QuickSupport \u0026 Portable (for Windows 7 \u0026 8)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "15.64.7",
              "status": "affected",
              "version": "15.64.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Full Client, Host, QuickSupport (v14 for Windows)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "14.7.48833",
              "status": "affected",
              "version": "14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "Full Client, Host, QuickSupport (v14 for Linux)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "14.7.48838",
              "status": "affected",
              "version": "14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "MacOS"
          ],
          "product": "Full Client, Host, QuickSupport (v14 for macOS)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "14.7.48838",
              "status": "affected",
              "version": "14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Full Client, Host, QuickSupport \u0026 Portable (v13 for Windows)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "13.2.36229",
              "status": "affected",
              "version": "13.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "Full Client, Host, QuickSupport (v13 for Linux)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "13.2.153978",
              "status": "affected",
              "version": "13.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "MacOS"
          ],
          "product": "Full Client, Host, QuickSupport (v13 for macOS)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "13.2.153981",
              "status": "affected",
              "version": "13.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Jamir0quai \u0026 sam91281"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eImproper\nneutralization of path traversal sequences in TeamViewer Desktop Clients prior\nVersion 15.81.5 allows an authenticated remote session participant to write files\nto unintended locations on the local file system via file transfer or virtual\nfile clipboard mechanisms. An attacker can leverage this behavior to achieve\narbitrary file write and potentially execute code with the privileges of the\naffected user.\u003c/p\u003e"
            }
          ],
          "value": "Improper\nneutralization of path traversal sequences in TeamViewer Desktop Clients prior\nVersion 15.81.5 allows an authenticated remote session participant to write files\nto unintended locations on the local file system via file transfer or virtual\nfile clipboard mechanisms. An attacker can leverage this behavior to achieve\narbitrary file write and potentially execute code with the privileges of the\naffected user."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-126",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-126 Path Traversal"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-73",
              "description": "CWE-73 External control of file name or path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T09:10:16.193Z",
        "orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
        "shortName": "TV"
      },
      "references": [
        {
          "url": "https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1008/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to the last available client version."
            }
          ],
          "value": "Update to the last available client version."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Improper Validation of File Paths in TeamViewer Desktop Clients",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
    "assignerShortName": "TV",
    "cveId": "CVE-2026-16444",
    "datePublished": "2026-08-26T09:10:16.193Z",
    "dateReserved": "2026-07-21T07:42:28.976Z",
    "dateUpdated": "2026-08-27T03:58:23.229Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-16444\",\"sourceIdentifier\":\"psirt@teamviewer.com\",\"published\":\"2026-08-26T10:16:39.940\",\"lastModified\":\"2026-08-27T04:16:40.453\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper\\nneutralization of path traversal sequences in TeamViewer Desktop Clients prior\\nVersion 15.81.5 allows an authenticated remote session participant to write files\\nto unintended locations on the local file system via file transfer or virtual\\nfile clipboard mechanisms. An attacker can leverage this behavior to achieve\\narbitrary file write and potentially execute code with the privileges of the\\naffected user.\"}],\"affected\":[{\"source\":\"psirt@teamviewer.com\",\"affectedData\":[{\"vendor\":\"TeamViewer\",\"product\":\"Full Client, Host, QuickSupport \u0026 Portable\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\",\"MacOS\",\"Linux\"],\"versions\":[{\"version\":\"15.0\",\"lessThan\":\"15.81.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TeamViewer\",\"product\":\"Full Client, Host, QuickSupport \u0026 Portable (for Windows 7 \u0026 8)\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"versions\":[{\"version\":\"15.64.0\",\"lessThan\":\"15.64.7\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TeamViewer\",\"product\":\"Full Client, Host, QuickSupport (v14 for Windows)\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"versions\":[{\"version\":\"14.0\",\"lessThan\":\"14.7.48833\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TeamViewer\",\"product\":\"Full Client, Host, QuickSupport (v14 for Linux)\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Linux\"],\"versions\":[{\"version\":\"14.0\",\"lessThan\":\"14.7.48838\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TeamViewer\",\"product\":\"Full Client, Host, QuickSupport (v14 for macOS)\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"MacOS\"],\"versions\":[{\"version\":\"14.0\",\"lessThan\":\"14.7.48838\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TeamViewer\",\"product\":\"Full Client, Host, QuickSupport \u0026 Portable (v13 for Windows)\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"versions\":[{\"version\":\"13.0\",\"lessThan\":\"13.2.36229\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TeamViewer\",\"product\":\"Full Client, Host, QuickSupport (v13 for Linux)\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Linux\"],\"versions\":[{\"version\":\"13.0\",\"lessThan\":\"13.2.153978\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TeamViewer\",\"product\":\"Full Client, Host, QuickSupport (v13 for macOS)\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"MacOS\"],\"versions\":[{\"version\":\"13.0\",\"lessThan\":\"13.2.153981\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@teamviewer.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.6,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-26T00:00:00+00:00\",\"id\":\"CVE-2026-16444\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@teamviewer.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-73\"}]}],\"references\":[{\"url\":\"https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1008/\",\"source\":\"psirt@teamviewer.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-16444\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-26T13:35:27.900203Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-26T13:35:57.752Z\"}}], \"cna\": {\"title\": \"Improper Validation of File Paths in TeamViewer Desktop Clients\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Jamir0quai \u0026 sam91281\"}], \"impacts\": [{\"capecId\": \"CAPEC-126\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-126 Path Traversal\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"TeamViewer\", \"product\": \"Full Client, Host, QuickSupport \u0026 Portable\", \"versions\": [{\"status\": \"affected\", \"version\": \"15.0\", \"lessThan\": \"15.81.5\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows\", \"MacOS\", \"Linux\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TeamViewer\", \"product\": \"Full Client, Host, QuickSupport \u0026 Portable (for Windows 7 \u0026 8)\", \"versions\": [{\"status\": \"affected\", \"version\": \"15.64.0\", \"lessThan\": \"15.64.7\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TeamViewer\", \"product\": \"Full Client, Host, QuickSupport (v14 for Windows)\", \"versions\": [{\"status\": \"affected\", \"version\": \"14.0\", \"lessThan\": \"14.7.48833\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TeamViewer\", \"product\": \"Full Client, Host, QuickSupport (v14 for Linux)\", \"versions\": [{\"status\": \"affected\", \"version\": \"14.0\", \"lessThan\": \"14.7.48838\", \"versionType\": \"custom\"}], \"platforms\": [\"Linux\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TeamViewer\", \"product\": \"Full Client, Host, QuickSupport (v14 for macOS)\", \"versions\": [{\"status\": \"affected\", \"version\": \"14.0\", \"lessThan\": \"14.7.48838\", \"versionType\": \"custom\"}], \"platforms\": [\"MacOS\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TeamViewer\", \"product\": \"Full Client, Host, QuickSupport \u0026 Portable (v13 for Windows)\", \"versions\": [{\"status\": \"affected\", \"version\": \"13.0\", \"lessThan\": \"13.2.36229\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TeamViewer\", \"product\": \"Full Client, Host, QuickSupport (v13 for Linux)\", \"versions\": [{\"status\": \"affected\", \"version\": \"13.0\", \"lessThan\": \"13.2.153978\", \"versionType\": \"custom\"}], \"platforms\": [\"Linux\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TeamViewer\", \"product\": \"Full Client, Host, QuickSupport (v13 for macOS)\", \"versions\": [{\"status\": \"affected\", \"version\": \"13.0\", \"lessThan\": \"13.2.153981\", \"versionType\": \"custom\"}], \"platforms\": [\"MacOS\"], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Update to the last available client version.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Update to the last available client version.\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1008/\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Improper\\nneutralization of path traversal sequences in TeamViewer Desktop Clients prior\\nVersion 15.81.5 allows an authenticated remote session participant to write files\\nto unintended locations on the local file system via file transfer or virtual\\nfile clipboard mechanisms. An attacker can leverage this behavior to achieve\\narbitrary file write and potentially execute code with the privileges of the\\naffected user.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eImproper\\nneutralization of path traversal sequences in TeamViewer Desktop Clients prior\\nVersion 15.81.5 allows an authenticated remote session participant to write files\\nto unintended locations on the local file system via file transfer or virtual\\nfile clipboard mechanisms. An attacker can leverage this behavior to achieve\\narbitrary file write and potentially execute code with the privileges of the\\naffected user.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-73\", \"description\": \"CWE-73 External control of file name or path\"}]}], \"providerMetadata\": {\"orgId\": \"13430f76-86eb-43b2-a71c-82c956ef31b6\", \"shortName\": \"TV\", \"dateUpdated\": \"2026-08-26T09:10:16.193Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-16444\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-27T03:58:23.229Z\", \"dateReserved\": \"2026-07-21T07:42:28.976Z\", \"assignerOrgId\": \"13430f76-86eb-43b2-a71c-82c956ef31b6\", \"datePublished\": \"2026-08-26T09:10:16.193Z\", \"assignerShortName\": \"TV\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-16444

Vulnerability from fkie_nvd - Published: 2026-08-26 10:16 - Updated: 2026-08-26 14:17

Severity

7.5 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	psirt@teamviewer.com	https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1008/

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS",
            "Linux"
          ],
          "product": "Full Client, Host, QuickSupport \u0026 Portable",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "15.81.5",
              "status": "affected",
              "version": "15.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Full Client, Host, QuickSupport \u0026 Portable (for Windows 7 \u0026 8)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "15.64.7",
              "status": "affected",
              "version": "15.64.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Full Client, Host, QuickSupport (v14 for Windows)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "14.7.48833",
              "status": "affected",
              "version": "14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "Full Client, Host, QuickSupport (v14 for Linux)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "14.7.48838",
              "status": "affected",
              "version": "14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "MacOS"
          ],
          "product": "Full Client, Host, QuickSupport (v14 for macOS)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "14.7.48838",
              "status": "affected",
              "version": "14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Full Client, Host, QuickSupport \u0026 Portable (v13 for Windows)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "13.2.36229",
              "status": "affected",
              "version": "13.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "Full Client, Host, QuickSupport (v13 for Linux)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "13.2.153978",
              "status": "affected",
              "version": "13.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "MacOS"
          ],
          "product": "Full Client, Host, QuickSupport (v13 for macOS)",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "13.2.153981",
              "status": "affected",
              "version": "13.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "psirt@teamviewer.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper\nneutralization of path traversal sequences in TeamViewer Desktop Clients prior\nVersion 15.81.5 allows an authenticated remote session participant to write files\nto unintended locations on the local file system via file transfer or virtual\nfile clipboard mechanisms. An attacker can leverage this behavior to achieve\narbitrary file write and potentially execute code with the privileges of the\naffected user."
    }
  ],
  "id": "CVE-2026-16444",
  "lastModified": "2026-08-26T14:17:07.860",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 5.9,
        "source": "psirt@teamviewer.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-16444",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-26T13:35:27.900203Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-26T10:16:39.940",
  "references": [
    {
      "source": "psirt@teamviewer.com",
      "url": "https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1008/"
    }
  ],
  "sourceIdentifier": "psirt@teamviewer.com",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-73"
        }
      ],
      "source": "psirt@teamviewer.com",
      "type": "Secondary"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-16444 (GCVE-0-2026-16444)

FKIE_CVE-2026-16444

Tags

Sightings

Nomenclature