Cpe:2.3:a:teamviewer:teamviewer:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3ateamviewerteamviewer/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 18:05:02 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgTeamViewer: Local privilege escalation via installer staging (CVE-2026-111583)https://feed.craftedsignal.io/briefs/2026-10-teamviewer-lpe/Tue, 27 Oct 2026 18:05:02 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-teamviewer-lpe/An improper access control vulnerability in the TeamViewer installer staging directory allows local low-privileged users to achieve arbitrary code execution as SYSTEM via a crafted installer options file.TeamViewer Full Client and Host for Windows versions prior to 15.82 are vulnerable to a local privilege escalation flaw. During the installation of the Advanced Asset Management component, the installer uses an insecurely permissioned staging directory. A local authenticated user with low privileges can place a crafted installer options file in this directory, which is then processed by the installer, resulting in execution of arbitrary commands with SYSTEM privileges during service activation.

Impact

Successful exploitation allows a local low-privileged user to gain full SYSTEM access on the affected Windows host.

Recommendation

  • Update all instances of TeamViewer Full Client and TeamViewer Host to version 15.82 or later immediately.
  • Review and restrict write permissions on installer staging directories if the upgrade cannot be performed immediately.
  • Monitor local file system activity for unexpected file writes to TeamViewer staging directories by non-administrative users.
]]>highadvisoryprivilege-escalationwindowslocal-accessvulnerabilityremote-accessinteger-overflowmacosteamviewer