CVE-2026-92375 (GCVE-0-2026-92375)
Vulnerability from cvelistv5
Published
2026-10-27 15:10
Modified
2026-10-27 15:10
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-284 - Improper Access Control
Summary
An improper access control vulnerability in
the IPC communication between TeamViewer Full Client or Host prior to version
15.83 and the Remote Management Monitoring component prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute scripts as
SYSTEM/root.
References
| URL | Tags | |
|---|---|---|
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TeamViewer | Full Client |
Version: 0 < 15.83 Version: 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8) Version: 14.7.0 (Windows) < 14.7.48868 (Windows) Version: 14.7.0 (Linux) < 14.7.48868 (Linux) Version: 14.7.0 (macOS) < 14.7.48868 (macOS) Version: 13.2.0 (Windows) < 13.2.36231 (Windows) Version: 13.2.0 (Linux) < 13.2.154008 (Linux) Version: 13.2.0 (macOS) < 13.2.154007 (macOS) |
||||||||||||
|
||||||||||||||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Full Client",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "15.83",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.64.10 (Legacy Windows 7 \u0026 8)",
"status": "affected",
"version": "15.64.0 (Legacy Windows 7 \u0026 8)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Windows)",
"status": "affected",
"version": "14.7.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Linux)",
"status": "affected",
"version": "14.7.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (macOS)",
"status": "affected",
"version": "14.7.0 (macOS)",
"versionType": "custom"
},
{
"lessThan": "13.2.36231 (Windows)",
"status": "affected",
"version": "13.2.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "13.2.154008 (Linux)",
"status": "affected",
"version": "13.2.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "13.2.154007 (macOS)",
"status": "affected",
"version": "13.2.0 (macOS)",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Host",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "15.83",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.64.10 (Legacy Windows 7 \u0026 8)",
"status": "affected",
"version": "15.64.0 (Legacy Windows 7 \u0026 8)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Windows)",
"status": "affected",
"version": "14.7.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (Linux)",
"status": "affected",
"version": "14.7.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "14.7.48868 (macOS)",
"status": "affected",
"version": "14.7.0 (macOS)",
"versionType": "custom"
},
{
"lessThan": "13.2.36231 (Windows)",
"status": "affected",
"version": "13.2.0 (Windows)",
"versionType": "custom"
},
{
"lessThan": "13.2.154008 (Linux)",
"status": "affected",
"version": "13.2.0 (Linux)",
"versionType": "custom"
},
{
"lessThan": "13.2.154007 (macOS)",
"status": "affected",
"version": "13.2.0 (macOS)",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"modules": [
"ITbrain_Monitoring_Service.exe",
"MonitoringDaemon",
"teamviewer-monitoringd"
],
"platforms": [
"Windows",
"Linux",
"MacOS"
],
"product": "Remote Management - Monitoring",
"vendor": "TeamViewer",
"versions": [
{
"lessThan": "26.10.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "0x_alibabas (Giuliano Sanfins)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn improper access control vulnerability in\nthe IPC communication between TeamViewer Full Client or Host prior to version\n15.83 and the Remote Management Monitoring component prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute scripts as\nSYSTEM/root.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "An improper access control vulnerability in\nthe IPC communication between TeamViewer Full Client or Host prior to version\n15.83 and the Remote Management Monitoring component prior to version 26.10.1\nallows a local authenticated attacker with low privileges to execute scripts as\nSYSTEM/root."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284: Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T15:10:09.611Z",
"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"shortName": "TV"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to the latest available version."
}
],
"value": "Update to the latest available version."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
"assignerShortName": "TV",
"cveId": "CVE-2026-92375",
"datePublished": "2026-10-27T15:10:09.611Z",
"dateReserved": "2026-09-16T07:16:01.957Z",
"dateUpdated": "2026-10-27T15:10:09.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…