CVE-2026-92377
High
Description
Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Full Client
PublishedOct 27, 2026
First seenOct 27, 2026
Weakness typeCWE-732CWE-732
How to fix
Update
- TeamViewer Full Client15.82, 15.64.10 (Legacy Windows 7 & 8), 14.7.48868, 13.2.36231 or later
- TeamViewer Host15.82, 15.64.10 (Legacy Windows 7 & 8), 14.7.48868, 13.2.36231 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TeamViewer Full Client | v < 15.82, 15.64.0 (Legacy Windows 7 & 8) ≤ v < 15.64.10 (Legacy Windows 7 & 8), 14.7.0 ≤ v < 14.7.48868, 13.2.0 ≤ v < 13.2.36231 | 15.82, 15.64.10 (Legacy Windows 7 & 8), 14.7.48868, 13.2.36231 |
| TeamViewer Host | v < 15.82, 15.64.0 (Legacy Windows 7 & 8) ≤ v < 15.64.10 (Legacy Windows 7 & 8), 14.7.0 ≤ v < 14.7.48868, 13.2.0 ≤ v < 13.2.36231 | 15.82, 15.64.10 (Legacy Windows 7 & 8), 14.7.48868, 13.2.36231 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.