CVE-2026-16444highCWE-73

CVE-2026-16444: high-severity vulnerability in TeamViewer Full Client, Host, QuickSupport &…

Improper Validation of File Paths in TeamViewer Desktop Clients

Published · Updated

Follow this CVE+ Monitor Full Client+ Monitor Host

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 7.5epss 0.4%
from disclosure to weapon40 days
Published on NVDAug 26
1st PoC+40d
Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can leverage this behavior to achieve arbitrary file write and potentially execute code with the privileges of the affected user.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
TeamViewer · Full Client, Host, QuickSupport & PortableTeamViewer · Full Client, Host, QuickSupport & Portable (for Windows 7 & 8)TeamViewer · Full Client, Host, QuickSupport & Portable (v13 for Windows)TeamViewer · Full Client, Host, QuickSupport (v13 for Linux)TeamViewer · Full Client, Host, QuickSupport (v13 for macOS)TeamViewer · Full Client, Host, QuickSupport (v14 for Linux)TeamViewer · Full Client, Host, QuickSupport (v14 for macOS)TeamViewer · Full Client, Host, QuickSupport (v14 for Windows)
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.