CVE-2026-19743: high-severity vulnerability in TeamViewer Full Client
Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.1%
exploitation probability
0.1%top 98% of all CVEs
observed exploitation
nono source reports it
Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Related CVEs — TeamViewer Full Client
In the same product, most dangerous first.
CVE-2026-19042HIGHCommand Injection in TeamViewer Desktop Client for Linux through Chat Link HandlingEPSS 2.0%CVE-2026-92370HIGHRemote Session Access Control Bypass Leading to Remote Code ExecutionEPSS 0.4%CVE-2025-36537HIGHIncorrect Permission Assignment for Critical Resource in TeamViewer Remote ManagementEPSS 0.2%CVE-2026-92368HIGHHeap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code ExecutionEPSS 0.1%CVE-2025-41421MEDIUMPrivilege Escalation via Symbolic Link Spoofing in TeamViewer ClientEPSS 0.1%CVE-2026-92371HIGHLocal Privilege Escalation via Improper Link Resolution in Cloud Session RecordingEPSS 0.1%