7.8Alta
CVE-2026-92375Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
Descripción
An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.
Debilidad (CWE):
CWE-284
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| TeamViewer | Full Client | < 15.83, 15.64.0 (Legacy Windows 7 & 8) – < 15.64.10 (Legacy Windows 7 & 8), 14.7.0 (Windows) – < 14.7.48868 (Windows), 14.7.0 (Linux) – < 14.7.48868 (Linux), 14.7.0 (macOS) – < 14.7.48868 (macOS), 13.2.0 (Windows) – < 13.2.36231 (Windows), 13.2.0 (Linux) – < 13.2.154008 (Linux), 13.2.0 (macOS) – < 13.2.154007 (macOS) | |
| TeamViewer | Host | < 15.83, 15.64.0 (Legacy Windows 7 & 8) – < 15.64.10 (Legacy Windows 7 & 8), 14.7.0 (Windows) – < 14.7.48868 (Windows), 14.7.0 (Linux) – < 14.7.48868 (Linux), 14.7.0 (macOS) – < 14.7.48868 (macOS), 13.2.0 (Windows) – < 13.2.36231 (Windows), 13.2.0 (Linux) – < 13.2.154008 (Linux), 13.2.0 (macOS) – < 13.2.154007 (macOS) | |
| TeamViewer | Remote Management - Monitoring | < 26.10.1 |