Out-of-Bounds Read Vulnerability in TeamViewer DEX Client for Windows
CVE-2026-23568

5.4MEDIUM

Key Information:

Vendor

Teamviewer

Status
Dex
Vendor
CVE Published:
29 January 2026

What is CVE-2026-23568?

An out-of-bounds read vulnerability exists in the TeamViewer DEX Client (formerly known as the 1E Client) specifically within the Content Distribution Service (NomadBranch.exe) prior to version 26.1 on Windows operating systems. This vulnerability allows an attacker within the same adjacent network to exploit it by sending specially crafted packets. The exploitation could lead to information leakage or denial-of-service situations, with potential ramifications such as the ability to bypass Address Space Layout Randomization (ASLR), which could escalate the likelihood of further malicious exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

DEX Windows 0 < 26.1

References

https://www.teamviewer.com/en/resources/trust-center/secu...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Threat Hunt Team of Bank of America
JSON
.