All vulnerabilities
CVE-2026-19743

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients

TeamViewer Full Client
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.13%Chance of exploitation activity in the next 30 days, higher than 2% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in15.82Also 15.64.8 (Legacy Windows 7 & 8), 14.7.48855 (Windows) and 5 moreCVE List
Published29 Sep 2026Updated 30 Sep 2026CVE List

What fixes it

Show all 16 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.

Text from CVE List

Affected versions 16

  • Full Clientaffected: 15.0 before 15.82CVE List
  • Full Clientaffected: 15.64.0 (Legacy Windows 7 & 8) before 15.64.8 (Legacy Windows 7 & 8)CVE List
  • Full Clientaffected: 14.7.0 (Windows) before 14.7.48855 (Windows)CVE List
  • Full Clientaffected: 13.2.0 (Windows) before 13.2.36230 (Windows)CVE List
  • Full Clientaffected: 14.7.0 (Linux) before 14.7.48855 (Linux)CVE List
  • Full Clientaffected: 13.2.0 (Linux) before 13.2.153995 (Linux)CVE List
  • Full Clientaffected: 14.7.0 (MacOS) before 14.7.48855 (MacOS)CVE List
  • Full Clientaffected: 13.2.0 (MacOS) before 13.2.153994 (MacOS)CVE List
  • Hostaffected: 15.0 before 15.82CVE List
  • Hostaffected: 15.64.0 (Legacy Windows 7 & 8) before 15.64.8 (Legacy Windows 7 & 8)CVE List
  • Hostaffected: 14.7.0 (Windows) before 14.7.48855 (Windows)CVE List
  • Hostaffected: 13.2.0 (Windows) before 13.2.36230 (Windows)CVE List
  • Hostaffected: 14.7.0 (Linux) before 14.7.48855 (Linux)CVE List
  • Hostaffected: 13.2.0 (Linux) before 13.2.153995 (Linux)CVE List
  • Hostaffected: 14.7.0 (MacOS) before 14.7.48855 (MacOS)CVE List
  • Hostaffected: 13.2.0 (MacOS) before 13.2.153994 (MacOS)CVE List

References 1