CVE-2026-19743

7.8 Élevée

Publiée le 29/09/2026 à 18:17 · Modifiée le 30/09/2026 à 18:17 · Analyse NVD reportée · Source : psirt@teamviewer.com

Description

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.

Traduire en français

Produits concernés

TeamViewer Full Client
TeamViewer Host

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.8 Élevée	psirt@teamviewer.com	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-22

Références

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1010/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories