TeamViewer

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

• 7.0HighFeb 7, 2020TeamViewer DesktopCVE-2019-18988TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were to know this key, they could decrypt protected information stored in registry or configuration files or decryption of the Unattended Access password to the system (which allows for remote login to the system).Added to KEV Nov 3, 2021 · 634 days after publicationExploited4.7% likelyExploit codeMetasploit

Recent

• –UnscoredOct 28, 2026TeamViewerADV-cccs-41da51c5e14dSerial number: AV26-1093 Date: October 28, 2026 As of October 27, 2026, TeamViewer is affected by vulnerabilities in the following products: TeamViewer Full Client & Host (Windows) Prior to 15.83 TeamViewer Full Client & Host (Linux) Prior to 15.83 TeamViewer Full Client & Host (macOS) Prior to 15.83 TeamViewer Host (Windows, Linux, macOS) Prior to 15.83 TeamViewer Portable (Windows) Prior to 15.83 TeamViewer Remote Control App (Android) Prior to 15.8.3 The Cyber Centre encourages users and admi
• 7.8HighOct 27, 2026TeamViewer Full Client Privilege escalationCVE-2026-92377Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.
• 7.8HighOct 27, 2026TeamViewer Remote Management - Monitoring Auth bypass / access controlCVE-2026-92376Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM privileges, resulting in local privilege escalation.
• 7.8HighOct 27, 2026TeamViewer Full Client Auth bypass / access controlCVE-2026-92375An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.
• 7.8HighOct 27, 2026TeamViewer Full ClientCVE-2026-92374A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.
• 8.8HighOct 27, 2026TeamViewer Full Client Memory corruptionCVE-2026-92372An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write t
• 8.8HighOct 27, 2026TeamViewer Full Client Memory corruptionCVE-2026-111585An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.
• 7.3HighOct 27, 2026TeamViewer Remote - Patch Management Privilege escalationCVE-2026-111584A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.
• 7.3HighOct 27, 2026TeamViewer Full Client Privilege escalationCVE-2026-111583Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.
• 7.3HighOct 27, 2026TeamViewer Remote Management - Monitoring Privilege escalationCVE-2026-111582A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges. Exploitation requires user interaction.
• 7.0HighFeb 7, 2020TeamViewer DesktopCVE-2019-18988TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were to know this key, they could decrypt protected information stored in registry or configuration files or decryption of the Unattended Access password to the system (which allows for remote login to the system).Exploited4.7% likelyExploit codeMetasploit

See every TeamViewer entry on the dashboard.

Top products

• Full Client6 CVEs in the last year
• Remote Management - Monitoring2 CVEs in the last year
• TeamViewer Remote - Patch Management1 CVE in the last year

Advisories

Official advisories from the last 90 days that name this vendor's CVEs.

• CCCS (Canada) · Oct 28, 2026TeamViewer security advisory (AV26-1093)ADV-cccs-41da51c5e14d