CVE-2026-111583

Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

State: Published
Severity: 7.3 High
Published: Oct 27, 2026
Updated: Oct 27, 2026
Reserved: Oct 16, 2026

Description

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H	TV

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
Full ClientTeamViewer	before 15.82Affected 15.64.0 (Legacy windows 7 & 8) to before 15.64.10 (Legacy windows 7 & 8)Affected
HostTeamViewer	before 15.82Affected 15.64.0 (Legacy Windows 7 & 8) to before 15.64.10 (Legacy Windows 7 & 8)Affected

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.