CVE-2026-92375
Received
Received - Intake
Improper Access Control in TeamViewer Client/Host
Vulnerability report for CVE-2026-92375, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-27
Last updated on: 2026-10-27
Assigner: TeamViewer Germany GmbH
Description
Description
An improper access control vulnerability in
the IPC communication between TeamViewer Full Client or Host prior to version
15.83 and the Remote Management Monitoring component prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute scripts as
SYSTEM/root.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| TeamViewer | Full Client | 0 |
| TeamViewer | Full Client | 15.64.0 (Legacy Windows 7 & 8) |
| TeamViewer | Full Client | 14.7.0 (Windows) |
| TeamViewer | Full Client | 14.7.0 (Linux) |
| TeamViewer | Full Client | 14.7.0 (macOS) |
| TeamViewer | Full Client | 13.2.0 (Windows) |
| TeamViewer | Full Client | 13.2.0 (Linux) |
| TeamViewer | Full Client | 13.2.0 (macOS) |
| TeamViewer | Host | 0 |
| TeamViewer | Host | 15.64.0 (Legacy Windows 7 & 8) |
| TeamViewer | Host | 14.7.0 (Windows) |
| TeamViewer | Host | 14.7.0 (Linux) |
| TeamViewer | Host | 14.7.0 (macOS) |
| TeamViewer | Host | 13.2.0 (Windows) |
| TeamViewer | Host | 13.2.0 (Linux) |
| TeamViewer | Host | 13.2.0 (macOS) |
| TeamViewer | Remote Management - Monitoring | 0 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
