Live › vulnerability › CVE-2026-92377
Go to dashboardTeamViewer Full Client and Host for Windows before 15.82 has an access control flaw in its Patch Management update mechanism. A local user with low privileges can forge an IPC response, make the service load a malicious DLL from a user-writable temp directory, and run code as NT AUTHORITY\SYSTEM.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Windows machines running TeamViewer Full Client or Host before . The attacker must already have a local account on the machine, so exposure is mainly a concern on shared or multi-user Windows hosts, jump boxes and developer machines where untrusted local users exist. Machines with only remote access and no local untrusted users are less exposed, but the sources do not say they are unaffected.
15.82No product ranges from the sources yet.
15.82.15.82 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-92377")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.