CVE-2026-92377: Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows
Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary directory. Successful exploitation results in arbitrary code execution with NT AUTHORITY\SYSTEM privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TeamViewer Full Client and Host for Windowsto a version that resolves this vulnerability.Fixed in 15.82
Event History
Frequently Asked Questions
Which installations are affected?
TeamViewer Full Client for Windows and TeamViewer Host for Windows are affected when they are running a version prior to 15.82 and use the Patch Management update mechanism.
What access does an attacker need to exploit this issue?
An attacker must already have local authenticated access with low privileges on the Windows system. They do not need user interaction, but must be able to supply a signed executable through a forged IPC response and place a malicious DLL in a user-writable temporary directory.
What is the impact if exploitation succeeds?
Successful exploitation allows arbitrary code execution as NT AUTHORITY\SYSTEM, giving the attacker full control of the affected system.
How can organizations remediate the issue?
Update TeamViewer Full Client or TeamViewer Host for Windows to version 15.82 or later.