7.8Alta

CVE-2026-92376Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows

TeamViewer Remote Management - Monitoring Publicada: (hace 6 días)

Descripción

Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary code with NT AUTHORITY\SYSTEM privileges, resulting in local privilege escalation.

Debilidad (CWE): CWE-287

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
TeamViewer Remote Management - Monitoring < 26.10.1

Referencias y parches