High severity · published Oct 27, 2026
CVE-2026-92375
Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
New
7.8
CVSS
–
EPSS
No
On KEV
Description
An improper access control vulnerability in
the IPC communication between TeamViewer Full Client or Host prior to version
15.83 and the Remote Management Monitoring component prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute scripts as
SYSTEM/root.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Full Client · TeamViewer
before 15.83; 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8); 14.7.0 (Windows) before 14.7.48868 (Windows); 14.7.0 (Linux) before 14.7.48868 (Linux); 14.7.0 (macOS) before 14.7.48868 (macOS); 13.2.0 (Windows) before 13.2.36231 (Windows); +2 more · source: vendor
HO
Host · TeamViewer
before 15.83; 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8); 14.7.0 (Windows) before 14.7.48868 (Windows); 14.7.0 (Linux) before 14.7.48868 (Linux); 14.7.0 (macOS) before 14.7.48868 (macOS); 13.2.0 (Windows) before 13.2.36231 (Windows); +2 more · source: vendor
RM
Remote Management - Monitoring · TeamViewer
before 26.10.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-92375
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-92375
www.teamviewer.com
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/
More from Full Client
8.8
CVE-2026-111585
Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
8.8
CVE-2026-92372
Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
8.8
CVE-2026-92370
Remote Session Access Control Bypass Leading to Remote Code Execution
8.8
CVE-2026-19042
Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling
7.8
CVE-2026-92377
Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows