CVE-2026-92377: fallo de gravedad alta en TeamViewer Full Client
Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.8epss 0.1%
Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC response and
cause it to load a malicious DLL from a user-writable temporary directory.
Successful exploitation results in arbitrary code execution with NT
AUTHORITY\SYSTEM privileges.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVEs relacionadas — TeamViewer Full Client
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-19042HIGHCommand Injection in TeamViewer Desktop Client for Linux through Chat Link HandlingEPSS 1.8%CVE-2026-92372HIGHOut-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code ExecutionEPSS 0.4%CVE-2026-92370HIGHRemote Session Access Control Bypass Leading to Remote Code ExecutionEPSS 0.4%CVE-2026-111585HIGHInteger Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer OverflowEPSS 0.3%CVE-2026-111583HIGHLocal Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for WindowsEPSS 0.2%CVE-2025-36537HIGHIncorrect Permission Assignment for Critical Resource in TeamViewer Remote ManagementEPSS 0.2%