High severity · published Oct 27, 2026
CVE-2026-111583
Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows
New
7.3
CVSS
–
EPSS
No
On KEV
Description
Improper access control in the installer
staging directory used by TeamViewer Full Client and Host prior to version
15.82 for Windows during installation of Advanced Asset Management allows a
local authenticated user with low privileges to execute arbitrary commands as
SYSTEM. An attacker can place a crafted installer options file that is
processed by the Advanced Asset Management installer during service activation.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Full Client · TeamViewer
before 15.82; 15.64.0 (Legacy windows 7 & 8) before 15.64.10 (Legacy windows 7 & 8) · source: vendor
HO
Host · TeamViewer
before 15.82; 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8) · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-111583
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-111583
www.teamviewer.com
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/
More from Full Client
8.8
CVE-2026-111585
Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
8.8
CVE-2026-92372
Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
8.8
CVE-2026-92370
Remote Session Access Control Bypass Leading to Remote Code Execution
8.8
CVE-2026-19042
Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling
7.8
CVE-2026-92377
Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows