{"schema":"threatline.record/2","record":{"id":"CVE-2026-92377","aliases":[],"summary":"Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows","details":"Improper access control in the Patch\nManagement update mechanism of TeamViewer Full Client and Host for Windows\nprior to version 15.82 allows a local authenticated attacker with low\nprivileges to supply a signed executable through a forged IPC response and\ncause it to load a malicious DLL from a user-writable temporary directory.\nSuccessful exploitation results in arbitrary code execution with NT\nAUTHORITY\\SYSTEM privileges.","categories":["Unclassified"],"product":"Full Client","vendor":"TeamViewer","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","source_modified_at":"2026-10-27T15:11:55.955Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"Full Client","vendor":"TeamViewer","versions":[{"status":"affected","version":"0","lessThan":"15.82","versionType":"custom"},{"status":"affected","version":"15.64.0 (Legacy Windows 7 & 8)","lessThan":"15.64.10 (Legacy Windows 7 & 8)","versionType":"custom"},{"status":"affected","version":"14.7.0","lessThan":"14.7.48868","versionType":"custom"},{"status":"affected","version":"13.2.0","lessThan":"13.2.36231","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","source_modified_at":"2026-10-27T15:11:55.955Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"Host","vendor":"TeamViewer","versions":[{"status":"affected","version":"0","lessThan":"15.82","versionType":"custom"},{"status":"affected","version":"15.64.0 (Legacy Windows 7 & 8)","lessThan":"15.64.10 (Legacy Windows 7 & 8)","versionType":"custom"},{"status":"affected","version":"14.7.0","lessThan":"14.7.48868","versionType":"custom"},{"status":"affected","version":"13.2.0","lessThan":"13.2.36231","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","source_modified_at":"2026-10-27T15:11:55.955Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Full Client","ecosystem":null},"version":"15.82","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","source_modified_at":"2026-10-27T15:11:55.955Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Full Client","ecosystem":null},"version":"15.64.10 (Legacy Windows 7 & 8)","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","source_modified_at":"2026-10-27T15:11:55.955Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Full Client","ecosystem":null},"version":"14.7.48868","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","source_modified_at":"2026-10-27T15:11:55.955Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Full Client","ecosystem":null},"version":"13.2.36231","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","source_modified_at":"2026-10-27T15:11:55.955Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Host","ecosystem":null},"version":"15.82","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","source_modified_at":"2026-10-27T15:11:55.955Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Host","ecosystem":null},"version":"15.64.10 (Legacy Windows 7 & 8)","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","source_modified_at":"2026-10-27T15:11:55.955Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Host","ecosystem":null},"version":"14.7.48868","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","source_modified_at":"2026-10-27T15:11:55.955Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"Host","ecosystem":null},"version":"13.2.36231","basis":"first unaffected version stated in the CVE record"}],"cvss":7.8,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-27T15:11:55.955Z","modified_at":"2026-10-27T15:11:55.955Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-92377","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T15:11:55.955Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-27T15:11:55.955Z","content_hash":"c7134491a83e2bcbe537dc46542c66b535d91789d7517d82bd68710239d5ae8c"}}