CVE-2026-19743

EUVD-2026-89019
Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 3.87%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
teamviewerfull_client
𝑥
< 13.2.36230
ENGINSIGHT
teamviewerfull_client
13.3 ≤
𝑥
< 14.7.48855
ENGINSIGHT
teamviewerfull_client
14.8 ≤
𝑥
< 15.64.8
ENGINSIGHT
teamviewerfull_client
15.65 ≤
𝑥
< 15.82
ENGINSIGHT
teamviewerfull_client
𝑥
< 13.2.153995
ENGINSIGHT
teamviewerfull_client
13.3 ≤
𝑥
< 14.7.48855
ENGINSIGHT
teamviewerfull_client
14.8 ≤
𝑥
< 15.82
ENGINSIGHT
teamviewerfull_client
𝑥
< 15.82
ENGINSIGHT
teamviewerhost
𝑥
< 13.2.36230
ENGINSIGHT
teamviewerhost
13.3 ≤
𝑥
< 14.7.48855
ENGINSIGHT
teamviewerhost
14.8 ≤
𝑥
< 15.64.8
ENGINSIGHT
teamviewerhost
15.65 ≤
𝑥
< 15.82
ENGINSIGHT
teamviewerhost
𝑥
< 13.2.153995
ENGINSIGHT
teamviewerhost
13.3 ≤
𝑥
< 14.7.48855
ENGINSIGHT
teamviewerhost
14.8 ≤
𝑥
< 15.82
ENGINSIGHT
teamviewerhost
𝑥
< 15.82
ENGINSIGHT
teamviewerremote
𝑥
< 13.2.36230
ENGINSIGHT
teamviewerremote
13.3 ≤
𝑥
< 14.7.48855
ENGINSIGHT
teamviewerremote
14.8 ≤
𝑥
< 15.64.8
ENGINSIGHT
teamviewerremote
15.65 ≤
𝑥
< 15.82
ENGINSIGHT
teamviewerremote
𝑥
< 13.2.153995
ENGINSIGHT
teamviewerremote
13.3 ≤
𝑥
< 14.7.48855
ENGINSIGHT
teamviewerremote
14.8 ≤
𝑥
< 15.82
ENGINSIGHT
teamviewerremote
𝑥
< 15.82
ENGINSIGHT