7.8High

CVE-2025-0065Improper Neutralization of Argument Delimiters in TeamViewer Clients

TeamViewer Remote Full Client; TeamViewer Remote Host Published: (1 year ago)

Description

Improper Neutralization of Argument Delimiters in the TeamViewer_service.exe component of TeamViewer Clients prior version 15.62 for Windows allows an attacker with local unprivileged access on a Windows system to elevate privileges via argument injection.

Weakness (CWE): CWE-88

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
TeamViewer Remote Full Client 15.0.0 – < 15.62, 14.0.0 – < 14.7.48799, 13.0.0 – < 13.2.36226, 12.0.0 – < 12.0.259319, 11.0.0 – < 11.0.259318
TeamViewer Remote Host 15.0.0 – < 15.62, 14.0.0 – < 14.7.48799, 13.0.0 – < 13.2.36226, 12.0.0 – < 12.0.259319, 11.0.0 – < 11.0.259318

References and patches