By year
10
18
19
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited TeamViewer flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2019-18988 TeamViewer Desktop Bypass Remote LoginExploited since Nov 3, 2021 · CVSS 7
Latest high and critical flaws
- CVE-2026-92377 Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticaHigh 7.8 · Oct 27, 2026
- CVE-2026-92376 Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allowHigh 7.8 · Oct 27, 2026
- CVE-2026-92375 An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management MonitoHigh 7.8 · Oct 27, 2026
- CVE-2026-92374 A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prHigh 7.8 · Oct 27, 2026
- CVE-2026-92372 An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker tHigh 8.8 · Oct 27, 2026
- CVE-2026-111585 An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.8High 8.8 · Oct 27, 2026
- CVE-2026-111584 A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticatedHigh 7.3 · Oct 27, 2026
- CVE-2026-111583 Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of AdvHigh 7.3 · Oct 27, 2026
- CVE-2026-111582 A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker High 7.3 · Oct 27, 2026
- CVE-2026-92371 TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionalHigh 7 · Sep 29, 2026
- CVE-2026-92370 An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remoHigh 8.8 · Sep 29, 2026
- CVE-2026-92369 TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism.High 7.3 · Sep 29, 2026
- CVE-2026-92368 TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recHigh 7.8 · Sep 29, 2026
- CVE-2026-19743 Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authentiHigh 7.8 · Sep 29, 2026
- CVE-2026-19042 A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands iHigh 8.8 · Aug 26, 2026
- CVE-2026-16444 Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to wrHigh 7.5 · Aug 26, 2026
- CVE-2026-12703 TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FHigh 8 · Jul 29, 2026
- CVE-2026-23572 Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional High 7.2 · Feb 5, 2026
- CVE-2025-64989 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-FindFileBySizeAndHash instruHigh 7.2 · Dec 11, 2025
- CVE-2025-64988 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-GetCmContentLocations instruction prior V19High 7.2 · Dec 11, 2025
- CVE-2025-64987 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-CheckSimpleIoC instruction.High 7.2 · Dec 11, 2025
- CVE-2025-64986 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instHigh 7.2 · Dec 11, 2025
- CVE-2025-44016 A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious acHigh 8.8 · Dec 11, 2025
- CVE-2025-36537 Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows alHigh 7 · Jun 24, 2025
- CVE-2025-0065 Improper Neutralization of Argument Delimiters in the TeamViewer_service.exe component of TeamViewer Clients prior version 15.62 for Windows allows an attacker High 7.8 · Jan 28, 2025
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.