CVE-2026-92377: falha de alta gravidade em TeamViewer Full Client
Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.1%
Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC response and
cause it to load a malicious DLL from a user-writable temporary directory.
Successful exploitation results in arbitrary code execution with NT
AUTHORITY\SYSTEM privileges.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVEs relacionadas — TeamViewer Full Client
No mesmo produto, das mais perigosas para as menos.
CVE-2026-19042HIGHCommand Injection in TeamViewer Desktop Client for Linux through Chat Link HandlingEPSS 1.8%CVE-2026-92372HIGHOut-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code ExecutionEPSS 0.4%CVE-2026-92370HIGHRemote Session Access Control Bypass Leading to Remote Code ExecutionEPSS 0.4%CVE-2026-111585HIGHInteger Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer OverflowEPSS 0.3%CVE-2026-111583HIGHLocal Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for WindowsEPSS 0.2%CVE-2025-36537HIGHIncorrect Permission Assignment for Critical Resource in TeamViewer Remote ManagementEPSS 0.2%