Improper Link Resolution in TeamViewer DEX on Windows
CVE-2026-23563

5.7MEDIUM

Key Information:

Vendor

Teamviewer

Status
Dex
Vendor
CVE Published:
29 January 2026

What is CVE-2026-23563?

The TeamViewer DEX software on Windows is susceptible to improper link resolution, allowing a low-privileged local attacker to exploit this vulnerability. By using a crafted RPC control junction or symlink, the attacker can manipulate the delete instruction for protected system files. This can lead to unauthorized file deletions, potentially compromising system integrity and stability. It’s essential for users to be aware of this vulnerability and apply necessary updates to secure their systems.

Affected Version(s)

DEX Windows 0 < 26.1

References

https://www.teamviewer.com/en/resources/trust-center/secu...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lockheed Martin Red Team
.