CVE-2026-111582: Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows
A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges. Exploitation requires user interaction.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TeamViewer Remote Management Monitoring installer for Windowsto a version that resolves this vulnerability.Fixed in 26.10.1
Event History
Frequently Asked Questions
Who is exposed to this issue?
Windows systems running the TeamViewer Remote Management Monitoring installer in a version prior to 26.10.1 are exposed. An attacker must already have authenticated local access with low privileges.
What does exploitation require?
The attacker needs local low-privileged access and user interaction. Successful exploitation can allow arbitrary code execution with elevated privileges.
Is upgrading the relevant remediation?
Yes. Update TeamViewer Remote Management Monitoring for Windows to version 26.10.1 or later.