All vulnerabilities
CVE-2026-92377

Full Client: Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows

TeamViewer Full Client
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in15.82Also 15.64.10 (Legacy Windows 7 & 8), 14.7.48868 and 1 moreCVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

Show all 8 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.

Text from CVE List

Affected versions 8

  • Full Clientaffected: all versions before 15.82CVE List
  • Full Clientaffected: 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8)CVE List
  • Full Clientaffected: 14.7.0 before 14.7.48868CVE List
  • Full Clientaffected: 13.2.0 before 13.2.36231CVE List
  • Hostaffected: all versions before 15.82CVE List
  • Hostaffected: 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8)CVE List
  • Hostaffected: 14.7.0 before 14.7.48868CVE List
  • Hostaffected: 13.2.0 before 13.2.36231CVE List

References 1