CVE-2026-111583
CVE-2026-111583 · Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.
CVSS 7.3 · High · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
full client
- Versions
- ≥ 0, < 15.82: Affected (custom)
- ≥ 15.64.0 (Legacy windows 7 & 8), < 15.64.10 (Legacy windows 7 & 8): Affected (custom)
Update to 15.64.10 (Legacy windows 7 & 8)
host
- Versions
- ≥ 0, < 15.82: Affected (custom)
- ≥ 15.64.0 (Legacy Windows 7 & 8), < 15.64.10 (Legacy Windows 7 & 8): Affected (custom)
Update to 15.64.10 (Legacy Windows 7 & 8)