CVE-2026-111583
Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.
| CWE | CWE-269 |
| Vendor | teamviewer |
| Product | full client |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for teamviewer full client
Be the first to know when new high vulnerabilities affecting teamviewer full client are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
TeamViewer / Full Client
0 < 15.82 15.64.0 (Legacy windows 7 & 8) < 15.64.10 (Legacy windows 7 & 8)
TeamViewer / Host
0 < 15.82 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8)
References
Credits
0x_alibabas (Giuliano Sanfins)