CVE-2026-92375
Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.
| CWE | CWE-284 |
| Vendor | teamviewer |
| Product | full client |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for teamviewer full client
Be the first to know when new high vulnerabilities affecting teamviewer full client are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
TeamViewer / Full Client
0 < 15.83 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8) 14.7.0 (Windows) < 14.7.48868 (Windows) 14.7.0 (Linux) < 14.7.48868 (Linux) 14.7.0 (macOS) < 14.7.48868 (macOS) 13.2.0 (Windows) < 13.2.36231 (Windows) 13.2.0 (Linux) < 13.2.154008 (Linux) 13.2.0 (macOS) < 13.2.154007 (macOS)
TeamViewer / Host
0 < 15.83 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8) 14.7.0 (Windows) < 14.7.48868 (Windows) 14.7.0 (Linux) < 14.7.48868 (Linux) 14.7.0 (macOS) < 14.7.48868 (macOS) 13.2.0 (Windows) < 13.2.36231 (Windows) 13.2.0 (Linux) < 13.2.154008 (Linux) 13.2.0 (macOS) < 13.2.154007 (macOS)
TeamViewer / Remote Management - Monitoring
0 < 26.10.1
References
Credits
0x_alibabas (Giuliano Sanfins)