Live › vulnerability › CVE-2026-111583
Go to dashboardTeamViewer Full Client and Host before 15.82 for Windows mishandle the installer staging directory during Advanced Asset Management installation. A local user with low privileges can plant a crafted installer options file that the installer processes, running arbitrary commands as SYSTEM.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Windows machines running TeamViewer Full Client or Host before where the Advanced Asset Management component was installed or activated. The attacker must already have a local account on the machine, so shared workstations and servers with multiple local users are the most exposed. Systems without TeamViewer or on a fixed version can skip it.
15.82No product ranges from the sources yet.
15.82 or later on Windows.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.
This page as .md · .json · in your agent: get_signal("CVE-2026-111583")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.