All vulnerabilities
CVE-2026-111583

Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

TeamViewer Full Client
Open in ThreatlineRecord JSON
CVSS
7.3High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in15.82Also 15.64.10 (Legacy windows 7 & 8), 15.64.10 (Legacy Windows 7 & 8)CVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

Description

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.

Text from CVE List

Affected versions 4

  • Full Clientaffected: all versions before 15.82CVE List
  • Full Clientaffected: 15.64.0 (Legacy windows 7 & 8) before 15.64.10 (Legacy windows 7 & 8)CVE List
  • Hostaffected: all versions before 15.82CVE List
  • Hostaffected: 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8)CVE List

References 1