{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/teamviewer-remote-control-android--15.83/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:teamviewer:teamviewer:*:*:*:*:*:windows:*:*","cpe:2.3:a:teamviewer:teamviewer:*:*:*:*:*:*:*:*","cpe:2.3:a:teamviewer:teamviewer:*:*:*:*:*:linux:*:*","cpe:2.3:a:teamviewer:teamviewer:*:*:*:*:*:macos:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-111583"},{"cvss":8.8,"id":"CVE-2026-111585"},{"cvss":8.8,"id":"CVE-2026-92372"},{"cvss":7.8,"id":"CVE-2026-92374"},{"cvss":7.8,"id":"CVE-2026-92375"},{"cvss":7.8,"id":"CVE-2026-92376"},{"cvss":7.8,"id":"CVE-2026-92377"},{"cvss":7.3,"id":"CVE-2026-111582"},{"cvss":7.3,"id":"CVE-2026-111584"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["TeamViewer Full Client (\u003c 15.82)","TeamViewer Host (\u003c 15.82)","TeamViewer Full Client (\u003c 15.83)","TeamViewer Portable (\u003c 15.83)","TeamViewer Remote Control App (\u003c 15.83)","TeamViewer Host (\u003c 15.83)","Remote Management Monitoring component (\u003c 26.10.1)","TeamViewer Remote (\u003c 15.83)","TeamViewer Remote Control Android (\u003c 15.83)","TeamViewer Remote Management Monitoring (\u003c 26.10.1)","TeamViewer Remote Management Patch Management (\u003c 26.9.1)"],"_cs_severities":["high"],"_cs_tags":["privilege-escalation","windows","local-access","vulnerability","remote-access","integer-overflow","macos","teamviewer","ipc","cve-2026-92375"],"_cs_type":"advisory","_cs_vendors":["TeamViewer"],"content_html":"\u003cp\u003eTeamViewer Full Client and Host for Windows versions prior to 15.82 are vulnerable to a local privilege escalation flaw. During the installation of the Advanced Asset Management component, the installer uses an insecurely permissioned staging directory. A local authenticated user with low privileges can place a crafted installer options file in this directory, which is then processed by the installer, resulting in execution of arbitrary commands with SYSTEM privileges during service activation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a local low-privileged user to gain full SYSTEM access on the affected Windows host.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate all instances of TeamViewer Full Client and TeamViewer Host to version 15.82 or later immediately.\u003c/li\u003e\n\u003cli\u003eReview and restrict write permissions on installer staging directories if the upgrade cannot be performed immediately.\u003c/li\u003e\n\u003cli\u003eMonitor local file system activity for unexpected file writes to TeamViewer staging directories by non-administrative users.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-28T03:17:42Z","date_published":"2026-10-27T18:05:02Z","id":"https://feed.craftedsignal.io/briefs/2026-10-teamviewer-lpe/","summary":"An improper access control vulnerability in the TeamViewer installer staging directory allows local low-privileged users to achieve arbitrary code execution as SYSTEM via a crafted installer options file.","title":"TeamViewer: Local privilege escalation via installer staging (CVE-2026-111583)","url":"https://feed.craftedsignal.io/briefs/2026-10-teamviewer-lpe/"}],"language":"en","title":"CraftedSignal Threat Feed - TeamViewer Remote Control Android (\u003c 15.83)","version":"https://jsonfeed.org/version/1.1"}