CVE-2025-0065

Improper Neutralization of Argument Delimiters in TeamViewer Clients

State: Published
Severity: 7.8 High
Published: Jan 28, 2025
Updated: Jan 28, 2025
Reserved: Dec 9, 2024

Description

Improper Neutralization of Argument Delimiters in the TeamViewer_service.exe component of TeamViewer Clients prior version 15.62 for Windows allows an attacker with local unprivileged access on a Windows system to elevate privileges via argument injection.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	TV

Weaknesses

CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected Products

Product	Versions
Remote Full ClientTeamViewer	15.0.0 to before 15.62Affected 14.0.0 to before 14.7.48799Affected 13.0.0 to before 13.2.36226Affected 12.0.0 to before 12.0.259319Affected 11.0.0 to before 11.0.259318Affected
Remote HostTeamViewer	15.0.0 to before 15.62Affected 14.0.0 to before 14.7.48799Affected 13.0.0 to before 13.2.36226Affected 12.0.0 to before 12.0.259319Affected 11.0.0 to before 11.0.259318Affected

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1001/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.